CVE-2026-23305

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> accel/rocket: fix unwinding in error path in rocket_probe<br /> <br /> When rocket_core_init() fails (as could be the case with EPROBE_DEFER),<br /> we need to properly unwind by decrementing the counter we just<br /> incremented and if this is the first core we failed to probe, remove the<br /> rocket DRM device with rocket_device_fini() as well. This matches the<br /> logic in rocket_remove(). Failing to properly unwind results in<br /> out-of-bounds accesses.