CVE-2026-89721

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range max_register The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xfffc. max_register names 0x10000, one register past the end of the mapping: dumping the registers through the regmap debugfs interface reads beyond the ioremapped region and oopses on the unmapped page. The oops fires with the regmap lock held, so later PHY operations deadlock.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-09-11 20:20:01.090000

Last modified

2026-10-19 09:18:12.280000

View original CVE JSON

{
  "id": "CVE-2026-89721",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-09-11T20:20:01.090",
  "lastModified": "2026-10-19T09:18:12.280",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nphy: rockchip-samsung-dcphy: fix out-of-range max_register\n\nThe PHY register block is 64KB, so with a register stride of 4 the\nlast accessible register sits at offset 0xfffc. max_register names\n0x10000, one register past the end of the mapping: dumping the\nregisters through the regmap debugfs interface reads beyond the\nioremapped region and oopses on the unmapped page. The oops fires\nwith the regmap lock held, so later PHY operations deadlock."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/phy/rockchip/phy-rockchip-samsung-dcphy.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "b2a1a2ae7818c9d8da12bf7b1983c8b9f5fb712b",
              "lessThan": "14afe18655c0951f4f85898f761bf92264e65ccd",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "b2a1a2ae7818c9d8da12bf7b1983c8b9f5fb712b",
              "lessThan": "c1a62f9dcf531d56c56da2e4435386b6d264c69f",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "b2a1a2ae7818c9d8da12bf7b1983c8b9f5fb712b",
              "lessThan": "4486e75ba647bd8b98fc1f053101b40caceeed4b",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/phy/rockchip/phy-rockchip-samsung-dcphy.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.15",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.15",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.50",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.4",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/14afe18655c0951f4f85898f761bf92264e65ccd",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/4486e75ba647bd8b98fc1f053101b40caceeed4b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c1a62f9dcf531d56c56da2e4435386b6d264c69f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}