Riskcovery

CVE-2026-98910

drm/amdkfd: Unwind debug trap enable on copy_to_user failure

State
Published
Severity
Not scored
Published
Oct 23, 2026
Updated
Oct 26, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Unwind debug trap enable on copy_to_user failure

If kfd_dbg_trap_enable() fails while copying runtime_info to userspace, it had already activated the trap, set debug_trap_enabled, taken an extra process reference, and opened the debug event file. Return -EFAULT without unwinding that state, leaving inconsistent trap state and a refcount imbalance that could break later DISABLE/ENABLE.

On copy_to_user failure, deactivate the trap and undo the rest of the enable setup before returning.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 to before 641be20110cdfb6d921605adb42a764a0fccac54Affected
  • 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 to before 656a40bdc20def58790b8512e6000195436d8855Affected
  • 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 to before 1b39f46eec2f907417d4955bb88434170f94a8d8Affected
  • 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 to before 01112e241e37f9ac98b6f418d93ce2e0b87b7ee0Affected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.