Incomplete cleanup in Linux kernel - CVE-2026-98910

Vulnerability identifier: #VU157594

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-98910

CWE-ID: CWE-459

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to disrupt subsequent GPU debug trap enable and disable operations.

The vulnerability exists due to incomplete cleanup in the Linux kernel AMD KFD kfd_dbg_trap_enable() function when copying runtime information to userspace fails. A local user can trigger a copy_to_user() failure during debug trap setup to leave inconsistent trap state and an unbalanced process reference count, potentially disrupting subsequent debug trap enable and disable operations.

Linux kernel
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17

• https://git.kernel.org/stable/c/01112e241e37f9ac98b6f418d93ce2e0b87b7ee0
• https://git.kernel.org/stable/c/1b39f46eec2f907417d4955bb88434170f94a8d8
• https://git.kernel.org/stable/c/641be20110cdfb6d921605adb42a764a0fccac54
• https://git.kernel.org/stable/c/656a40bdc20def58790b8512e6000195436d8855

• Incomplete cleanup in Linux kernel amd amdkfd driver
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more