All vulnerabilities
CVE-2026-99210

Linux: accel/rocket: clear rdev on device init failure

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in79071b67182e1b352d51a3917729b8d424710b49Also 4ac852419f0d317c7bd8db5b8acb3cc78be7fe33CVE List
Published28 Oct 2026Updated 28 Oct 2026CVE List

What fixes it

  • 79071b67182e1b352d51a3917729b8d424710b49LinuxCVE List
  • 4ac852419f0d317c7bd8db5b8acb3cc78be7fe33LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/rocket: clear rdev on device init failure

rocket_probe() stores the return value from rocket_device_init() in the file-scoped rdev pointer before checking whether it is an error pointer. If rocket_device_init() fails, rdev is left as an ERR_PTR.

The rdev pointer is also used as the marker for whether the shared rocket device has already been initialized. A later core probe can therefore see a non-NULL rdev, skip rocket_device_init(), and dereference the error pointer when reading rdev->num_cores.

Save the error code and clear rdev before returning from the rocket_device_init() failure path.

Text from CVE List

Affected versions 8

  • Linuxaffected: ed98261b41687323ffa02ca20fef1e60b38fd1aa before 79071b67182e1b352d51a3917729b8d424710b49CVE List
  • Linuxaffected: ed98261b41687323ffa02ca20fef1e60b38fd1aa before dd47a6c920083b069f00f0920e4566915a6aec46CVE List
  • Linuxaffected: ed98261b41687323ffa02ca20fef1e60b38fd1aa before 4ac852419f0d317c7bd8db5b8acb3cc78be7fe33CVE List
  • Linuxaffected: 6.18CVE List
  • Linuxunaffected: all versions before 6.18CVE List
  • Linuxunaffected: 6.18.59 through 6.18.*CVE List
  • Linuxunaffected: 7.2.13 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3