The vulnerability resides in the Linux kernel’s AMD KFD driver, where the function kfd_smi_ev_enabled() bypasses the superuser privilege check when the event PID is zero. As a result, events such as PROCESS_START, PROCESS_END, and VMFAULT are emitted with pid=0 while still containing another process’s PID and command name. A user belonging to the render group—and therefore having normal user privileges—can intercept these events through /dev/kfd and observe all GPU workloads, exposing sensitive information about other processes.

The vulnerability affects any Linux system running the kernel with the DRM/amdkfd driver that has not yet incorporated the patch commit 5bb2dfa65d8da83e87b2a31c270bc567df69a5ca. All kernel versions released before that commit are vulnerable, regardless of distribution, because the affected code paths exist in the flagship AMD KFD implementation.

The EPSS score is less than 1%, indicating that exploitation is unlikely but not impossible. The CVSS score of 7.0 reflects high severity for information disclosure. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The attack vector is local and restricted to users who can access /dev/kfd, typically members of the render group. An attacker in that group can monitor GPU activity across all processes, compromising confidentiality of piggybacking on SMI events.