In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copy_to_user failure If… (CVE-2026-98910)

The vulnerability in the Linux kernel's drm/amdkfd subsystem occurs when kfd_dbg_trap_enable() fails while copying runtime_info to userspace. Although the trap is activated and debug_trap_enabled is set, along with an extra process reference and an opened debug event file, a failure in copy_to_user returns -EFAULT without undoing these changes. This leaves the trap state inconsistent and causes a reference count imbalance, which could disrupt later disable/enable operations of the debug trap. The fix involves deactivating the trap and undoing the enable setup on copy_to_user failure before returning.

The inconsistent trap state and reference count imbalance can cause instability or malfunction in the debug trap enable/disable mechanism within the drm/amdkfd kernel component. This could affect kernel debugging operations related to AMD devices but does not directly indicate privilege escalation or arbitrary code execution. No known exploits in the wild have been reported.

A fix has been implemented to ensure that on copy_to_user failure, the trap is deactivated and all related state changes are undone before returning. Users should apply the official kernel update that includes this fix once available. Patch status is not explicitly confirmed in the provided data; verify with the vendor or kernel maintainers for the current remediation status.