CVE-2026-53315: drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp()
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/ras: Fix NULL deref in rascoregetutcsecondtimestamp()
rascoregetutcsecondtimestamp() retrieves the current UTC timestamp (in seconds since the Unix epoch) through a platform-specific RAS system callback and is used for timestamping RAS error events.
The function checks rascore in the conditional statement before calling the sysfn callback. However, when the condition fails, the function prints an error message using rascore->dev.
If rascore is NULL, this can lead to a potential NULL pointer dereference when accessing rascore->dev.
Add an early NULL check for rascore at the beginning of the function and return 0 when the pointer is not valid. This prevents the dereference and makes the control flow clearer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53315?
The severity of CVE-2026-53315 is rated as 15.
How do I fix CVE-2026-53315?
To fix CVE-2026-53315, update your Linux kernel to the version where the vulnerability has been addressed.
What does CVE-2026-53315 exploit?
CVE-2026-53315 exploits a NULL dereference vulnerability in the ras_core_get_utc_second_timestamp function.
Which software is affected by CVE-2026-53315?
CVE-2026-53315 affects the Linux kernel through its AMD RAS functionality.
What is the impact of CVE-2026-53315?
The impact of CVE-2026-53315 is a potential crash or unexpected behavior in systems utilizing the affected RAS functionality.