Memory Overrun Vulnerability in Rocket Acceleration Device by Rockchip

CVE-2026-99184

What is CVE-2026-99184?

A memory overrun vulnerability affects the rocket acceleration device in the Linux kernel, specifically during the unbinding and rebinding of cores. The function rocket_remove() incorrectly decrements the number of cores being managed, which may lead to silent errors when attempting to access memory beyond allocated boundaries. This issue arises when cores are removed in a certain order, which might cause the system to mismanage core bindings. It was identified during a test series exposing the system to potential invalid memory operations. Properly addressing this vulnerability allows for accurate core management, enhancing system reliability and performance.

References