CVE-2026-64008

The CVE-2026-64008 issue affects the Linux kernel’s accel/rocket path. rocket_ioctl_create_bo() creates a GEM handle early via drm_gem_handle_create(), then proceeds through fallible steps (sgt allocation, drm_mm insert, iommu_map). If any step fails after the handle is live, the error path frees...

CVE-2026-64008 accel/rocket: fix UAF via dangling GEM handle in create_bo

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix UAF via dangling GEM handle in createbo rocketioctlcreatebo inserts a GEM handle into the file's IDR via drmgemhandlecreate early on, then performs several operations that can fail sgt allocation, drmmm insert,...