CVE-2026-80703

drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE

N/A
Published: August 28, 2026 at 06:53 AM UTC
Updated: August 30, 2026 at 07:33 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without proper ownership or ptrace authorization. (cherry picked from commit 4db4c5ffd5585b72622ecf6ffedf2da258ee23f5)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.5 ≤ v < 6.12.1036.5 ≤ v < 6.18.446.5 ≤ v < 6.6.1516.5 ≤ v < 7.1.86.5 ≤ v < 7.20ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb5086.5
Vendor states this is fixed in 4070909ac042f44654aac72f7986ea550c96f591 (fixed)
Vendor states this is fixed in 99b2fe4f19e3be0a8d0a0b5ea98d855970889653 (fixed)
Vendor states this is fixed in 9e52212aff8ed1fd9087728f61243ce3efd9d0ac (fixed)
Vendor states this is fixed in b8c05061997408bf81759f2dd31cd5f66771d15f (fixed)
Vendor states this is fixed in ce813614f63b020a826071276a92f2cfae7cba79 (fixed)
Vendor states this is fixed in 6.12.103 (unaffected)
Vendor states this is fixed in 6.18.44 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)
Vendor states this is fixed in 6.6.151 (unaffected)
Vendor states this is fixed in 7.1.8 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card