Executive brief
A vulnerability was identified in the Linux kernel's AMD graphics driver related to Reliability, Availability, and Serviceability (RAS) features. Under specific error conditions, the system could attempt to access memory that does not exist, leading to a system crash or kernel panic. This primarily affects the stability of systems using AMD hardware.
Technical details
A NULL pointer dereference exists in the ras_core_ras_interrupt_detected() function within the AMD GPU driver's RAS (Reliability, Availability, and Serviceability) component. The vulnerability occurs in the error path when the 'ras_core' pointer is NULL, but the code attempts to access 'ras_core->dev' to log an error message. This is a local vulnerability that can be triggered during specific hardware interrupt error conditions. An attacker or a malfunctioning system state could trigger this dereference, resulting in a kernel oops or denial of service (system crash). The issue has been resolved by adding proper NULL checks before accessing the structure members.
Affected products
- Linux Linux 6.19 to 7.0.10
Timeline
- 2026-06-26: disclosed
- 2026-06-26: advisory