SB20260325150 - Out-of-bounds write in Linux kernel accel rocket driver

Description

This security bulletin contains information about 1 security vulnerability.

1) Out-of-bounds write (CVE-ID: CVE-2026-23305)

The vulnerability allows a local user to cause a denial of service, disclose sensitive information, and potentially execute arbitrary code.

The vulnerability exists due to a boundary error in the rocket driver when handling device probe error paths. A local user can trigger improper unwinding during initialization failure to cause out-of-bounds memory accesses.

Exploitation requires loading or probing of the rocket accelerator driver, which may require privileged access to trigger device initialization.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/34f4495a7f72895776b81969639f527c99eb12b9
• https://git.kernel.org/stable/c/7fc4b49474c836cee7d9801abf05e0198fcbfa74
• https://git.kernel.org/stable/c/eeaf28c8f4defe371a008a5ddefaf18abf534f81