drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.16 % · centile 5 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without proper ownership or ptrace authorization. (cherry picked from commit 4db4c5ffd5585b72622ecf6ffedf2da258ee23f5)
Références
- https://git.kernel.org/stable/c/ce813614f63b020a826071276a92f2cfae7cba79
- https://git.kernel.org/stable/c/b8c05061997408bf81759f2dd31cd5f66771d15f
- https://git.kernel.org/stable/c/9e52212aff8ed1fd9087728f61243ce3efd9d0ac
- https://git.kernel.org/stable/c/4070909ac042f44654aac72f7986ea550c96f591
- https://git.kernel.org/stable/c/99b2fe4f19e3be0a8d0a0b5ea98d855970889653
Références européennes
- ENISA EUVD · EUVD-2026-67438
- GCVE · GCVE-0-2026-80703
Avis du CERT-FR
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 < ce813614f63b020a826071276a92f2cfae7cba79 ; affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 < b8c05061997408bf81759f2dd31cd5f66771d15f ; affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 < 9e52212aff8ed1fd9087728f61243ce3efd9d0ac ; affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 < 4070909ac042f44654aac72f7986ea550c96f591 ; affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 < 99b2fe4f19e3be0a8d0a0b5ea98d855970889653 |
| Linux · Linux | affected 6.5 ; unaffected 0 < 6.5 ; unaffected 6.6.151 ≤ 6.6.* ; unaffected 6.12.103 ≤ 6.12.* ; unaffected 6.18.44 ≤ 6.18.* ; unaffected 7.1.8 ≤ 7.1.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |