Linux Kernel KFD: Unwind Debug Trap on copy_to_user Failure
CVE-2026-98910 Published on October 23, 2026
drm/amdkfd: Unwind debug trap enable on copy_to_user failure
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Unwind debug trap enable on copy_to_user failure
If kfd_dbg_trap_enable() fails while copying runtime_info to userspace,
it had already activated the trap, set debug_trap_enabled, taken an extra
process reference, and opened the debug event file. Return -EFAULT without
unwinding that state, leaving inconsistent trap state and a refcount
imbalance that could break later DISABLE/ENABLE.
On copy_to_user failure, deactivate the trap and undo the rest of the
enable setup before returning.
Products Associated with CVE-2026-98910
stack.watch emails you whenever new vulnerabilities are published in Linux Kernel or Canonical Ubuntu Linux. Just hit a watch button to start following.
Affected Versions
Linux:- Version 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 and below 641be20110cdfb6d921605adb42a764a0fccac54 is affected.
- Version 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 and below 656a40bdc20def58790b8512e6000195436d8855 is affected.
- Version 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 and below 1b39f46eec2f907417d4955bb88434170f94a8d8 is affected.
- Version 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 and below 01112e241e37f9ac98b6f418d93ce2e0b87b7ee0 is affected.
- Version 6.5 is affected.
- Before 6.5 is unaffected.
- Version 6.6.158, <= 6.6.* is unaffected.
- Version 6.12.111, <= 6.12.* is unaffected.
- Version 6.18.53, <= 6.18.* is unaffected.
- Version 7.2, <= * is unaffected.