CVE-2026-53316 is a vulnerability in the Linux kernel's drm/amd/ras subsystem where a NULL pointer dereference occurs in the function ras_core_ras_interrupt_detected() when ras_core is NULL and ras_core->dev is accessed in the error path. This flaw can lead to a denial of service condition by crashing the system. The issue was reported by Dan Carpenter and fixed in Linux kernel versions 7.0.0 and later. The vendor advisory from Ubuntu confirms that patches are available and that a system reboot is required after updating. The advisory also notes a broad set of other kernel vulnerabilities fixed in the same update, including issues affecting AMD Zen 2 processors. The CVSS v3.1 score is 5.5 (medium severity) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high impact on availability.

The vulnerability allows a local attacker with low privileges to cause a denial of service by triggering a NULL pointer dereference in the kernel, resulting in a system crash. There is no impact on confidentiality or integrity. The medium CVSS score reflects the availability impact. No known exploits are reported in the wild. The issue is part of a broader set of kernel security fixes addressing multiple subsystems and architectures.

A patch is available and should be applied by updating the Linux kernel to version 7.0.0 or later as provided by the vendor. After updating, a system reboot is required to complete the remediation. Due to an ABI change, third-party kernel modules must be recompiled and reinstalled. Follow the vendor's update instructions carefully. No additional mitigation actions are indicated by the vendor advisory.