CVE-2026-99210

In the Linux kernel, the following vulnerability has been resolved:

accel/rocket: clear rdev on device init failure

rocket probe() stores the return value from rocket device init() in the file-scoped rdev pointer before checking whether it is an error pointer. If rocket device init() fails, rdev is left as an ERR PTR.

The rdev pointer is also used as the marker for whether the shared rocket device has already been initialized. A later core probe can therefore see a non-NULL rdev, skip rocket device init(), and dereference the error pointer when reading rdev->num cores.

Save the error code and clear rdev before returning from the rocket device init() failure path.