Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23305

accel/rocket: fix unwinding in error path in rocket_probe

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix unwinding in error path in rocket_probe When rocket_core_init() fails (as could be the case with EPROBE_DEFER), we need to properly unwind by decrementing the counter we just incremented and if this is the first core we failed to probe, remove the rocket DRM device with rocket_device_fini() as well. This matches the logic in rocket_remove(). Failing to properly unwind results in out-of-bounds accesses.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0810d5ad88a18f1e6d549853a388ad0316f74e36 to < 7fc4b49474c836cee7d9801abf05e0198fcbfa74affected
  • 0810d5ad88a18f1e6d549853a388ad0316f74e36 to < eeaf28c8f4defe371a008a5ddefaf18abf534f81affected
  • 0810d5ad88a18f1e6d549853a388ad0316f74e36 to < 34f4495a7f72895776b81969639f527c99eb12b9affected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.18.17 to ≤ 6.18.*unaffected
  • 6.19.7 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References