Executive brief
A vulnerability was identified in the Linux kernel's AMD graphics driver, specifically within the Reliability, Availability, and Serviceability (RAS) component. This component is responsible for logging hardware errors. A flaw in how the system handles timestamps for these errors could cause the operating system to crash (kernel panic) if certain internal data structures are missing. This primarily impacts system stability and availability.
Technical details
A NULL pointer dereference exists in the 'ras_core_get_utc_second_timestamp' function within 'drivers/gpu/drm/amd/ras/rascore/ras_core.c'. The function originally checked if 'ras_core' was valid before calling a callback, but if the check failed, it proceeded to use 'ras_core->dev' in an error logging macro (RAS_DEV_ERR). An attacker or a specific hardware error state could trigger this path, resulting in a kernel panic. The fix introduces an early NULL check to return 0 safely if the context is invalid. This affects Linux kernel versions around 6.19 and 7.0.x, and has been patched in stable branches.
Affected products
- Linux Linux Kernel 6.19, 7.0.10, 7.1
Timeline
- 2026-03-15: other: Patch authored
- 2026-06-26: disclosed: CVE published