Linux Kernel up to 7.0.9 drm /amd/ras ras_core_get_utc_second_timestamp dev null pointer dereference

Summaryinfo

A vulnerability was found in Linux Kernel up to 7.0.9. It has been declared as critical. This impacts the function ras_core_get_utc_second_timestamp of the file /amd/ras of the component drm. The manipulation of the argument dev results in null pointer dereference. This vulnerability is cataloged as CVE-2026-53315. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.0.9. Affected is the function ras_core_get_utc_second_timestamp of the file /amd/ras of the component drm. The manipulation of the argument dev with an unknown input leads to a null pointer dereference vulnerability. CWE is classifying the issue as CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. This is going to have an impact on availability. CVE summarizes:

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() ras_core_get_utc_second_timestamp() retrieves the current UTC timestamp (in seconds since the Unix epoch) through a platform-specific RAS system callback and is used for timestamping RAS error events. The function checks ras_core in the conditional statement before calling the sys_fn callback. However, when the condition fails, the function prints an error message using ras_core->dev. If ras_core is NULL, this can lead to a potential NULL pointer dereference when accessing ras_core->dev. Add an early NULL check for ras_core at the beginning of the function and return 0 when the pointer is not valid. This prevents the dereference and makes the control flow clearer.

The advisory is available at git.kernel.org. This vulnerability is traded as CVE-2026-53315 since 06/09/2026. Technical details are known, but there is no available exploit.

Upgrading to version 7.0.10 eliminates this vulnerability. Applying the patch 6c84f7f0afc415691ffa7d48aa7ce1d8e6083032/2b8101cc3b34d4d80d799360d2744829d5964479 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 7.0.0
• 7.0.1
• 7.0.2
• 7.0.3
• 7.0.4
• 7.0.5
• 7.0.6
• 7.0.7
• 7.0.8
• 7.0.9

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion