CVE-2026-80703: Linux kernel · drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE
Source GCVE Database
Not known to be exploited.
Data as of 26 Oct 2026, 13:47 UTC
Rated by Threat Radar · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 4% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 28 Aug 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without proper ownership or ptrace authorization. (cherry picked from commit 4db4c5ffd5585b72622ecf6ffedf2da258ee23f5)
References
- nvd.nist.gov/vuln/detail/CVE-2026-80703 (opens in a new tab)
- git.kernel.org/stable/c/4070909ac042f44654aac72f7986ea550c96f591 (opens in a new tab)
- git.kernel.org/stable/c/99b2fe4f19e3be0a8d0a0b5ea98d855970889653 (opens in a new tab)
- git.kernel.org/stable/c/9e52212aff8ed1fd9087728f61243ce3efd9d0ac (opens in a new tab)
- git.kernel.org/stable/c/b8c05061997408bf81759f2dd31cd5f66771d15f (opens in a new tab)
- git.kernel.org/stable/c/ce813614f63b020a826071276a92f2cfae7cba79 (opens in a new tab)