Device Initialization Error in Linux Kernel Affecting Rocket Device from Linux Foundation

CVE-2026-99210

What is CVE-2026-99210?

A vulnerability in the Linux kernel's handling of the Rocket device initialization may lead to improper error handling. If the function rocket_device_init() fails, it erroneously leaves the file-scoped pointer rdev pointing to an error code instead of clearing it. This can mislead later processes into thinking that the Rocket device is initialized, leading to potential system instability or crashes when the erroneous pointer is dereferenced. A fix has been implemented to ensure that rdev is cleared when an initialization error occurs.

References