Missing Authorization Check in Linux Kernel's GPU Debugging Feature

CVE-2026-80703

What is CVE-2026-80703?

A vulnerability exists in the Linux kernel's GPU debugging interface, specifically in the KFD_IOC_DBG_TRAP_DISABLE operation, where an insufficient authorization mechanism allows users with access to /dev/kfd to terminate other processes' debug sessions without appropriate privileges. This flaw can lead to unauthorized manipulations and disruption of active debugging sessions, posing risks to system integrity and security.

References