CVE-2026-80703drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without proper ownership or ptrace authorization. (cherry picked from commit 4db4c5ffd5585b72622ecf6ffedf2da258ee23f5)
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 30, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before ce813614f63b020a826071276a92f2cfae7cba79; from 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before b8c05061997408bf81759f2dd31cd5f66771d15f; from 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before 9e52212aff8ed1fd9087728f61243ce3efd9d0ac; from 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before 4070909ac042f44654aac72f7986ea550c96f591; from 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before 99b2fe4f19e3be0a8d0a0b5ea98d855970889653 | CNA record |
References
- https://git.kernel.org/stable/c/ce813614f63b020a826071276a92f2cfae7cba79
- https://git.kernel.org/stable/c/b8c05061997408bf81759f2dd31cd5f66771d15f
- https://git.kernel.org/stable/c/9e52212aff8ed1fd9087728f61243ce3efd9d0ac
- https://git.kernel.org/stable/c/4070909ac042f44654aac72f7986ea550c96f591
- https://git.kernel.org/stable/c/99b2fe4f19e3be0a8d0a0b5ea98d855970889653
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.