CVE-2026-23305

In the Linux kernel, the following vulnerability has been resolved:

accel/rocket: fix unwinding in error path in rocket_probe

When rocketcoreinit() fails (as could be the case with EPROBEDEFER), we need to properly unwind by decrementing the counter we just incremented and if this is the first core we failed to probe, remove the rocket DRM device with rocketdevicefini() as well. This matches the logic in rocketremove(). Failing to properly unwind results in out-of-bounds accesses.