All vulnerabilities
CVE-2026-97422

Linux: drm/amdkfd: fix SMI event cross-process information leak

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in6fc7ab7fcd7eefb2f371a1d43cf7a860a08f922aAlso 470319a893f616ef661a63e825a8e1b9b6eddb91, 5bb2dfa65d8da83e87b2a31c270bc567df69a5ca and 1 moreCVE List
Published24 Sep 2026Updated 21 Oct 2026CVE List

What fixes it

  • 6fc7ab7fcd7eefb2f371a1d43cf7a860a08f922aLinuxCVE List
  • 470319a893f616ef661a63e825a8e1b9b6eddb91LinuxCVE List
  • 5bb2dfa65d8da83e87b2a31c270bc567df69a5caLinuxCVE List
  • 92a8dba246d371fe268280e5fd74b0955688e6dfLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: fix SMI event cross-process information leak

kfd_smi_ev_enabled() skips the suser privilege check when pid=0. PROCESS_START, PROCESS_END, and VMFAULT events are emitted with pid=0 while carrying another process's PID and command name, so any /dev/kfd user in the render group can monitor all GPU workloads.

Pass the target process PID into kfd_smi_event_add() for these events so the existing per-client filter restricts delivery to the owning process or CAP_SYS_ADMIN subscribers.

Text from CVE List

Affected versions 10

  • Linuxaffected: 938a0650aae6275ba8e924685836bdee2c6aa3db before 6fc7ab7fcd7eefb2f371a1d43cf7a860a08f922aCVE List
  • Linuxaffected: 938a0650aae6275ba8e924685836bdee2c6aa3db before 470319a893f616ef661a63e825a8e1b9b6eddb91CVE List
  • Linuxaffected: 938a0650aae6275ba8e924685836bdee2c6aa3db before 5bb2dfa65d8da83e87b2a31c270bc567df69a5caCVE List
  • Linuxaffected: 938a0650aae6275ba8e924685836bdee2c6aa3db before 92a8dba246d371fe268280e5fd74b0955688e6dfCVE List
  • Linuxaffected: 5.9CVE List
  • Linuxunaffected: all versions before 5.9CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.114 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 4