Linux kernel amdkfd: any /dev/kfd holder can disable another process's GPU debug session
Impact
The debug-trap disable ioctl did not check ownership or ptrace authorization before tearing down a debug session. Any local user or container that can open /dev/kfd - which on an AMD Instinct node is every tenant running a ROCm workload - could terminate the debug session attached to a different process. On a shared GPU node that crosses the tenant boundary: a neighbouring job's debugger is detached without authorization, along with whatever trap handling depended on it. The record describes an authorization gap only; no memory corruption or code execution is claimed.
Who can reach it
Local and authenticated: any process holding an open /dev/kfd, the normal state inside a ROCm pod. No elevated capability required.
What to do
Install a stable kernel carrying the amdkfd authorization fix and reboot each AMD GPU node; the change is in the kernel ioctl path, so it cannot be hot-patched into a running amdgpu, and evicting GPU workloads is required either way. The record names no other mitigation.
References
Related entries
- GPU / accelerator firmware (VBIOS, GSP, NVSwitch): GPU-resident firmware sits below the host OS and is not coveredNCVD-0000-012-gpu-accelerator-firmware-vbios-g · GPU / accelerator firmware (VBIOS, GSP, NVSwitch)Unscored
- NVIDIA Multi-Instance GPU (MIG) partitioning: MIG gives each instance its own SM slice, L2 slice, memory slice andNCVD-2020-001-nvidia-multi-instance-gpu-mig-pa · NVIDIA Multi-Instance GPU (MIG) partitioningUnscored
- NVIDIA Multi-Instance GPU (MIG) partitioning: MIG gives each instance its own SM slice, L2 slice, memory slice andNCVD-2020-003-nvidia-multi-instance-gpu-mig-pa · NVIDIA Multi-Instance GPU (MIG) partitioningUnscored
- Integrated GPU graphics data compression (Intel, AMD, Apple, Arm, Qualcomm, NVIDIA): GPUs apply data-dependent losslessNCVD-2023-003-integrated-gpu-graphics-data-com · Integrated GPU graphics data compression (Intel, AMD, Apple, Arm, Qualcomm, NVIDIA)Unscored
- NVIDIA Confidential Computing (H100/H200/B100/B200/GB200) - CC-DevTools operating mode: NVIDIA GPU confidentialNCVD-2023-004-nvidia-confidential-computing-h1 · NVIDIA Confidential Computing (H100/H200/B100/B200/GB200) - CC-DevTools operating modeUnscored
- Integrated GPU graphics data compression (Intel, AMD, Apple, Arm, Qualcomm, NVIDIA): GPUs apply data-dependent losslessNCVD-2023-005-integrated-gpu-graphics-data-com · Integrated GPU graphics data compression (Intel, AMD, Apple, Arm, Qualcomm, NVIDIA)Unscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.