CVE-2026-53315None▾ Sunlit

drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp() ras_core_get_utc_second_timestamp() retrieves the current UTC timestamp (in seconds since the Unix e…

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score3/ 100 · Minimal

impact 2.8 · likelihood 0 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Jun 26, 2026

Updated

Nov 6, 2026

CVSS

—

Vendor

Linux

Product

Linux

CWE

—

Depth score

3 · Minimal

EPSS

0.14% · p4

Platforms

—

Source

CVEORG

Vector

—

CISA SSVC

decided 2026-11-06

Exploitation: none
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Nov 6.

0.1% → 0.1%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 133 days

Jun 26, 2026Published
Disclosed via CVEORG
Nov 6, 2026Record revised
Last analysed / modified upstream
Nov 6, 2026EPSS first tracked
0.1%

Linux #cve.org

Affected

Linux >= 13c91b5b4378b5d08dc9ae9121b1645a0beec0bb < 6c84f7f0afc415691ffa7d48aa7ce1d8e6083032
Linux >= 13c91b5b4378b5d08dc9ae9121b1645a0beec0bb < 2b8101cc3b34d4d80d799360d2744829d5964479
Linux 6.19

Full technical detail▾

Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp()

ras_core_get_utc_second_timestamp() retrieves the current UTC timestamp (in seconds since the Unix epoch) through a platform-specific RAS system callback and is used for timestamping RAS error events.

The function checks ras_core in the conditional statement before calling the sys_fn callback. However, when the condition fails, the function prints an error message using ras_core->dev.

If ras_core is NULL, this can lead to a potential NULL pointer dereference when accessing ras_core->dev.

Add an early NULL check for ras_core at the beginning of the function and return 0 when the pointer is not valid. This prevents the dereference and makes the control flow clearer.

Affected

Linux >= 13c91b5b4378b5d08dc9ae9121b1645a0beec0bb < 6c84f7f0afc415691ffa7d48aa7ce1d8e6083032
Linux >= 13c91b5b4378b5d08dc9ae9121b1645a0beec0bb < 2b8101cc3b34d4d80d799360d2744829d5964479
Linux 6.19

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org

drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp()

▾ Sunlit zone — Low / medium · no exploitation signal

Depth score3/ 100 · Minimal

impact 2.8 · likelihood 0 · exploitation 0

Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/ras: Fix NULL deref in ras_core_get_utc_second_timestamp()

The function checks ras_core in the conditional statement before calling the sys_fn callback. However, when the condition fails, the function prints an error message using ras_core->dev.

If ras_core is NULL, this can lead to a potential NULL pointer dereference when accessing ras_core->dev.

Add an early NULL check for ras_core at the beginning of the function and return 0 when the pointer is not valid. This prevents the dereference and makes the control flow clearer.