Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without proper ownership or ptrace authorization. (cherry picked from commit 4db4c5ffd5585b72622ecf6ffedf2da258ee23f5)
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before ce813614f63b020a826071276a92f2cfae7cba79; affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before b8c05061997408bf81759f2dd31cd5f66771d15f; affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before 9e52212aff8ed1fd9087728f61243ce3efd9d0ac; affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before 4070909ac042f44654aac72f7986ea550c96f591; affected 0ab2d7532b05a3e7c06fd3b0c8bd6b46c1dfb508 before 99b2fe4f19e3be0a8d0a0b5ea98d855970889653 |
| Linux / Linux | affected 6.5; unaffected 0 before 6.5; unaffected 6.6.151 through 6.6.*; unaffected 6.12.103 through 6.12.*; unaffected 6.18.44 through 6.18.*; unaffected 7.1.8 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/ce813614f63b020a826071276a92f2cfae7cba79
- https://git.kernel.org/stable/c/b8c05061997408bf81759f2dd31cd5f66771d15f
- https://git.kernel.org/stable/c/9e52212aff8ed1fd9087728f61243ce3efd9d0ac
- https://git.kernel.org/stable/c/4070909ac042f44654aac72f7986ea550c96f591
- https://git.kernel.org/stable/c/99b2fe4f19e3be0a8d0a0b5ea98d855970889653