diff --git a/ntoskrnl/ex/dbgctrl.c b/ntoskrnl/ex/dbgctrl.c
index dbb47793ee5..c6553324a80 100644
--- a/ntoskrnl/ex/dbgctrl.c
+++ b/ntoskrnl/ex/dbgctrl.c
@@ -218,6 +218,10 @@ NtSystemDebugControl(
     ULONG Length = 0;
     NTSTATUS Status;
 
+    /* Debugger controlling requires the debug privilege */
+    if (!SeSinglePrivilegeCheck(SeDebugPrivilege, PreviousMode))
+        return STATUS_ACCESS_DENIED;
+
     _SEH2_TRY
     {
         if (PreviousMode != KernelMode)