CVE-2026-23305

accel/rocket: fix unwinding in error path in rocket_probe

published March 25, 2026

CVSS
—
EPSS
0%
Percentile
2.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

accel/rocket: fix unwinding in error path in rocket_probe

When rocket_core_init() fails (as could be the case with EPROBE_DEFER),

we need to properly unwind by decrementing the counter we just

incremented and if this is the first core we failed to probe, remove the

rocket DRM device with rocket_device_fini() as well. This matches the

logic in rocket_remove(). Failing to properly unwind results in

out-of-bounds accesses.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00129 · 2.3th percentile
Published
2026-03-25T10:27Z
EPSS history
Timeline
  • 25 MAR 10:27Z
    accel/rocket: fix unwinding in error path in rocket_probe
    cvelistv5