{"id":"CVE-2026-99210","published":"2026-10-28T11:17:42.417","lastModified":"2026-10-28T11:17:42.417","description":"In the Linux kernel, the following vulnerability has been resolved:\n\naccel/rocket: clear rdev on device init failure\n\nrocket_probe() stores the return value from rocket_device_init() in the\nfile-scoped rdev pointer before checking whether it is an error pointer.\nIf rocket_device_init() fails, rdev is left as an ERR_PTR.\n\nThe rdev pointer is also used as the marker for whether the shared rocket\ndevice has already been initialized. A later core probe can therefore see\na non-NULL rdev, skip rocket_device_init(), and dereference the error\npointer when reading rdev->num_cores.\n\nSave the error code and clear rdev before returning from the\nrocket_device_init() failure path.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/4ac852419f0d317c7bd8db5b8acb3cc78be7fe33","tags":[]},{"url":"https://git.kernel.org/stable/c/79071b67182e1b352d51a3917729b8d424710b49","tags":[]},{"url":"https://git.kernel.org/stable/c/dd47a6c920083b069f00f0920e4566915a6aec46","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}