CVE-2026-99184

A flaw was found in the Linux kernel's accel/rocket driver. When device cores are removed, the driver prematurely decrements the active core count during lookup, leaving the final core unreleased and retaining stale state information. A privileged local attacker could exploit this issue by unbinding and rebinding accelerator cores, causing subsequent registrations to perform an out-of-bounds write past the allocated core array. This memory corruption can lead to system instability and a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.