What’s Vulnerable › Vulnerabilities

CVE-2026-80703: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-28 · updated 2026-08-30

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without proper ownership or ptrace authorization. (cherry picked from commit 4db4c5ffd5585b72622ecf6ffedf2da258ee23f5)

Affected products

• Linux kernel: 6.5 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4070909ac042f44654aac72f7986ea550c96f591
• https://git.kernel.org/stable/c/99b2fe4f19e3be0a8d0a0b5ea98d855970889653
• https://git.kernel.org/stable/c/9e52212aff8ed1fd9087728f61243ce3efd9d0ac
• https://git.kernel.org/stable/c/b8c05061997408bf81759f2dd31cd5f66771d15f
• https://git.kernel.org/stable/c/ce813614f63b020a826071276a92f2cfae7cba79

Get alerted when CVE-2026-80703 or the next vulnerability affects your stack