Linux KFD: Missing Authorization Check on KFD_TRAP_DISABLE (CWE-862)

Vulnerability Overview Vulnerability Name: drm/amdkgb: Fix missing authorization check for in active KFD Commit Message: commit Problem Description: Previously, users with access to could terminate debug sessions of other processes without proper namespace or process authorization. Fix: An authorization check for the operation has been added to the function in , ensuring that only processes with permissions can perform this operation. Scope of Impact Affected File: Affected Versions: Linux kernel stable branch (linux.git) Affected Component: KFD (Kernel Fusion Driver) character device driver for AMD GPUs POC/Exploitation Code ```c / Check if target is still PTRACED. / if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target != p && xpg == XPG_TRAP_DISABLE) { if (target

Goal Reached Thanks to every supporter — we hit 100%!

Linux KFD: Missing Authorization Check on KFD_TRAP_DISABLE (CWE-862)