Threats tagged 'ghsa-p54q-xhjq-3xh7'

A vulnerability in the Linux kernel's drm/amdkfd component allows cross-process information leakage via SMI events. The flaw occurs because the function kfd_smi_ev_enabled() skips a superuser privilege check when the process ID (pid) is zero. This causes PROCESS_START, PROCESS_END, and VMFAULT events to be emitted with pid=0 but containing another process's PID and command name, enabling any user in the render group with access to /dev/kfd to monitor all GPU workloads.