CVE-2026-80703: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Fix missing authorization check in KFDIOCDBGTRAPDISABLE
Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without proper ownership or ptrace authorization.
(cherry picked from commit 4db4c5ffd5585b72622ecf6ffedf2da258ee23f5)
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A user who has access to /dev/kfd can exploit the issue. The vulnerable behavior allows that user to target another process's active GPU debug session.
What access or authorization does an attacker need?
The attacker needs access to /dev/kfd. Before the fix, they did not need to own the target debug session or have ptrace authorization for the target process.
What is the impact of successful exploitation?
An attacker can terminate another process's active GPU debug session. The issue is an unauthorized disruption of GPU debugging activity.
How can I determine whether a system may be exposed?
Systems may be exposed if /dev/kfd is accessible to users and active GPU debug sessions are present. The provided data does not identify affected kernel versions, so version-based assessment cannot be made from this information alone.