---
id: CVE-2026-97422
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdkfd: fix SMI event cross-process information leak

  kfd_smi_ev_enabled() skips the suser privilege check when pid=0.
  PROCESS_START, PROCESS_END, and VMFAULT event…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/amdkfd: fix SMI event cross-process information leak

  kfd_smi_ev_enabled() skips the suser privilege check when pid=0.
  PROCESS_START, PROCESS_END, and VMFAULT event…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    5bb2dfa65d8da83e87b2a31c270bc567df69a5ca
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    92a8dba246d371fe268280e5fd74b0955688e6df
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-09-24'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T17:17:20.113'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97422'
references:
  - url: 'https://git.kernel.org/stable/c/5bb2dfa65d8da83e87b2a31c270bc567df69a5ca'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/92a8dba246d371fe268280e5fd74b0955688e6df'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-24T16:47:15.883Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: fix SMI event cross-process information leak

kfd_smi_ev_enabled() skips the suser privilege check when pid=0.
PROCESS_START, PROCESS_END, and VMFAULT events are emitted with
pid=0 while carrying another process's PID and command name, so any
/dev/kfd user in the render group can monitor all GPU workloads.

Pass the target process PID into kfd_smi_event_add() for these events
so the existing per-client filter restricts delivery to the owning
process or CAP_SYS_ADMIN subscribers.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.