Linux Kernel CVE-2026-53301

The vulnerability resides in the Linux kernel reset controller subsystem, specifically the Amlogic T7 SoC driver under drivers/reset/amlogic/t7. CWE-476 (NULL Pointer Dereference) identifies the root cause: the driver registers with the kernel reset framework without initializing the required reset_ops structure. When any kernel path dereferences this ops pointer - such as during subsystem initialization or device probe - the kernel encounters a NULL address and panics. The upstream commit description explicitly states the T7 SoC reset is currently unused, meaning the vulnerable code path may be latent in most deployments and not readily exercised without specific hardware activity. Affected code is introduced at commit fb4c31587adfa9cd50661a535bdbfcc4da57ee38 and spans multiple stable branches. CPE identifier cpe:2.3:a:linux:linux covers the affected software, while the practical scope is restricted entirely to physical Amlogic T7 SoC hardware.