CVE-2026-98910 drm/amdkfd: Unwind debug trap enable on copy_to_user failure

Not scored Published Updated
Exploited in the wild
Not known
Fix
Available

What is CVE-2026-98910?

CVE-2026-98910 is a vulnerability in Linux, published on 23 Oct 2026.

Official description

In the Linux kernel, the following vulnerability has been resolved:

drm/amdkfd: Unwind debug trap enable on copy_to_user failure

If kfd_dbg_trap_enable() fails while copying runtime_info to userspace, it had already activated the trap, set debug_trap_enabled, taken an extra process reference, and opened the debug event file. Return -EFAULT without unwinding that state, leaving inconsistent trap state and a refcount imbalance that could break later DISABLE/ENABLE.

On copy_to_user failure, deactivate the trap and undo the rest of the enable setup before returning.

Which versions are affected by CVE-2026-98910?

How do I fix CVE-2026-98910?

Upgrade to a fixed version.

Is CVE-2026-98910 being exploited?

There is no known exploitation of CVE-2026-98910 in the wild and no public exploit code.

Sources

Also known as AZL-110674, BELL-CVE-2026-98910, DEBIAN-CVE-2026-98910, GHSA-9wgp-44pj-7g49, UBUNTU-CVE-2026-98910.

Is CVE-2026-98910 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free