CVE-2026-97621

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: fix unchecked bound endpoint name length rockchip_dp_drm_encoder_enable() uses sprintf() to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficiently long path can overflow the buffer. Use snprintf() with the destination size to truncate the generated name and keep the writes within bounds.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-09-25 11:17:16.360000

Last modified

2026-10-19 10:17:39.933000

View original CVE JSON

{
  "id": "CVE-2026-97621",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-09-25T11:17:16.360",
  "lastModified": "2026-10-19T10:17:39.933",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/rockchip: analogix_dp: fix unchecked bound endpoint name length\n\nrockchip_dp_drm_encoder_enable() uses sprintf() to format a device tree\npath into a 32-byte stack buffer. Device tree paths are not limited to\nthis size, so a sufficiently long path can overflow the buffer.\n\nUse snprintf() with the destination size to truncate the generated name\nand keep the writes within bounds."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/gpu/drm/rockchip/analogix_dp-rockchip.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "729f8eefdcadaff98606931e691910f17d8d59d6",
              "lessThan": "49f5268f43a791dd0d9ff554cce25a3685c7250b",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "729f8eefdcadaff98606931e691910f17d8d59d6",
              "lessThan": "2fcd112caa4ebc64fdcb509f0b26d8daa3fac950",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "729f8eefdcadaff98606931e691910f17d8d59d6",
              "lessThan": "bc69439d983cc491cc86e01fafc1deb94e1bb85e",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/gpu/drm/rockchip/analogix_dp-rockchip.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.16",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.16",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.53",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.7",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/2fcd112caa4ebc64fdcb509f0b26d8daa3fac950",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/49f5268f43a791dd0d9ff554cce25a3685c7250b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bc69439d983cc491cc86e01fafc1deb94e1bb85e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}