CVE-2026-80703

Received Received - Intake

Authorization Bypass in Linux Kernel KFD Debug Session Termination

Publication date: 2026-08-28

Last updated on: 2026-08-30

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without proper ownership or ptrace authorization. (cherry picked from commit 4db4c5ffd5585b72622ecf6ffedf2da258ee23f5)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-30

Generated

2026-09-18

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-80703

EUVD

EUVD-2026-67438

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel allows users with access to /dev/kfd to terminate another process's GPU debug session without proper authorization. It involves a missing check in the KFD_IOC_DBG_TRAP_DISABLE function, enabling unauthorized users to stop active debug sessions.

Detection Guidance

This vulnerability involves unauthorized termination of GPU debug sessions in the Linux kernel. Detection requires checking for unauthorized access to /dev/kfd or suspicious debug session terminations. Examine kernel logs for unexpected KFD_IOC_DBG_TRAP_DISABLE ioctl calls or unauthorized ptrace attempts.

Impact Analysis

If exploited, this flaw could disrupt legitimate GPU debugging sessions, potentially causing data loss or unexpected behavior in applications relying on GPU debugging. Users with /dev/kfd access could interfere with other processes without permission.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR or HIPAA as it involves unauthorized termination of GPU debug sessions in the Linux kernel. However, if exploited, it could potentially lead to unauthorized access or disruption of processes, which may indirectly affect data integrity or availability requirements under these regulations.

Mitigation Strategies

Apply the latest Linux kernel security updates to patch the missing authorization check. Restrict access to /dev/kfd to authorized users only. Monitor for unauthorized debug session terminations or ptrace misuse in system logs.

Hi! I’m here to help you understand CVE-2026-80703. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70