CVE Tools
Track your stack

CVE-2026-98910

drm/amdkfd: Unwind debug trap enable on copy_to_user failure

No known exploitation. No EPSS score yet. Fixed versions are out.

CVSS —Not scoredEPSS percentile—No score yetCISA KEVNot listedNo confirmed exploitation
No public exploit knownFix1 product4 fixed builds listed below

Published Updated Sources: CVE.org

NVD CVE.org

What to do

Find your product and version, then upgrade to the build on the right.

  • LinuxAffected: ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 641be20110cdfb6d921605adb42a764a0fccac54Upgrade to: 641be20110cdfb6d921605adb42a764a0fccac54Affected: ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 656a40bdc20def58790b8512e6000195436d8855Upgrade to: 656a40bdc20def58790b8512e6000195436d8855Affected: ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1b39f46eec2f907417d4955bb88434170f94a8d8Upgrade to: 1b39f46eec2f907417d4955bb88434170f94a8d8Affected: ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 01112e241e37f9ac98b6f418d93ce2e0b87b7ee0Upgrade to: 01112e241e37f9ac98b6f418d93ce2e0b87b7ee0 + 3 more branchesStated by: CVE record

Versions as the sources state them. Full version matrix after sign-in

What it is

From the CVE record

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copy_to_user failure If kfd_dbg_trap_enable() fails while copying runtime_info to userspace, it had already activated the trap, set debug_trap_enabled, taken an extra process reference, and opened the debug event file. Return -EFAULT without unwinding that state, leaving inconsistent trap state and a refcount imbalance that could break later DISABLE/ENABLE. On copy_to_user failure, deactivate the trap and undo the rest of the enable setup before returning.

In plain language

No plain-language summary for this CVE yet.

Exploitation

Where each signal puts this CVE on the scale from published to confirmed exploited.

CISA KEV

Not in the catalog. CISA has not confirmed exploitation.

Public exploits

No public exploit or proof of concept found in the sources we track.

EPSS

No EPSS score yet. New CVEs are usually scored within a few days.

Affected products

Sources

References in the record

And 1 more reference. See all after sign-in

Watch the software you run.

My Stack ranks new CVEs for your products by real-world exploitation, so the next serious one reaches you without reading every advisory.

We'll flag the next CVE, public exploit or patch for Linux, not every advisory.