CVE-2026-99184

The Linux kernel contains a vulnerability in the accel/rocket driver where unbinding cores in the order they were bound leads to an out-of-bounds write . This occurs because rocket_remove() decrements rdev->num_cores, while find_core_for_dev() searches only up to num_cores - 1. Consequently, t...

PT-2026-128177

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: search every core slot when a core is removed rocket remove decrements rdev-num cores for each core it removes, while find core for dev searches slots 0 to num cores - 1. Unbinding the cores in the order they were...