CVE-2026-89590Medium· 5.5▾ SunlitA flaw was found in the `accel/rocket` driver within the Linux kernel. Incorrect error handling in the `rocket_job_run()` function can lead to resource leaks. This occurs when the system fails to properly release references to Direct Memor…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
— → 4.7
none → medium
Last analysed / modified upstream
— → 5.5
none → medium
A flaw was found in the accel/rocket driver within the Linux kernel. Incorrect error handling in the rocket_job_run() function can lead to resource leaks. This occurs when the system fails to properly release references to Direct Memory Access (DMA) fences and Power Management (PM) resources during error conditions. The consequence is that the Neural Processing Unit (NPU) may be prevented from suspending, leading to resource exhaustion and potential system instability.
kernel: accel/rocket: Fix error path handling in rocket_job_run() — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-14.
Not affected:
Refer to the advisory for fix availability.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89585Medium· 5.5kernel: auxdisplay: charlcd: cancel backlight work on registration failure (CVE-2026-89585)
CVE-2026-89594Medium· 5.5kernel: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device (CVE-2026-89594)
CVE-2026-89597Medium· 5.5kernel: fbdev: uvesafb: unregister connector callback on init failure (CVE-2026-89597)
CVE-2026-89518Medium· 5.5kernel: sched_ext: Fix this_rq() assumptions in dispatch kfuncs (CVE-2026-89518)
CVE-2026-95897Medium· 5.5A security vulnerability has been detected in Dask up to 2026.8.0
CVE-2026-13087High· 8.8A heap out-of-bounds write vulnerability was found in the Linux kernel's RPC-over-RDMA server reply path in net/sunrpc/xprtrdma/svc_rdma_sendto.c