Search: CVE-2026-97422

A vulnerability in the Linux kernel's drm/amdkfd component allowed cross-process information leakage via SMI events. Specifically, the function kfd_smi_ev_enabled() skipped a privilege check when pid=0, causing certain GPU workload events to be emitted with pid=0 but containing another process's PID and command name. This allowed any user in the render group with access to /dev/kfd to monitor all GPU workloads. The issue has been fixed by passing the target process PID into the event function to restrict event delivery appropriately.