Linux kernel amdkfd: any /dev/kfd holder can disable another process's GPU debug session
Impact
The debug-trap disable ioctl did not check ownership or ptrace authorization before tearing down a debug session. Any local user or container that can open /dev/kfd - which on an AMD Instinct node is every tenant running a ROCm workload - could terminate the debug session attached to a different process. On a shared GPU node that crosses the tenant boundary: a neighbouring job's debugger is detached without authorization, along with whatever trap handling depended on it. The record describes an authorization gap only; no memory corruption or code execution is claimed.
Who can reach it
Local and authenticated: any process holding an open /dev/kfd, the normal state inside a ROCm pod. No elevated capability required.
What to do
Install a stable kernel carrying the amdkfd authorization fix and reboot each AMD GPU node; the change is in the kernel ioctl path, so it cannot be hot-patched into a running amdgpu, and evicting GPU workloads is required either way. The record names no other mitigation.
References
Related entries
- Linux kernel amdkfd: unvalidated CRIU-restored IDs reach idr_alloc and can trigger a kernel WARNCVE-2026-80870 · Linux kernel amdkfd CRIU restore (kfd_criu_restore_event, criu_restore_memory_of_gpu)Unscored
- Linux kernel drm/xe: OA config ioctl leaks sync entries and fence references when the config emit failsCVE-2026-80903 · Linux kernel drm/xe OA (observation architecture stream config ioctl)Unscored
- Linux drm/amdgpu: UVD H.264 minimum dpb size derived from level rather than the decode messageCVE-2026-80907 · Linux kernel drm/amdgpu (UVD H.264 decode picture buffer size check)Unscored
- Linux kernel amdgpu: unvalidated UVD decode message fields overflow the DPB size calculationCVE-2026-80908 · Linux kernel amdgpu UVD (decode message field validation)Unscored
- Linux kernel amdgpu: recursive reservation lock in devcoredump can self-deadlock the coredump workerCVE-2026-80919 · Linux kernel amdgpu (devcoredump IB capture)Unscored
- Linux kernel nouveau: use-after-free racing the GEM info ioctl against GEM closeCVE-2026-89553 · Linux kernel nouveau GEM (info ioctl VMA lookup)Unscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.