CVE-2026-97621

CVE-2026-97621

published September 25, 2026

CVSS
—
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/rockchip: analogix_dp: fix unchecked bound endpoint name length

rockchip_dp_drm_encoder_enable() uses sprintf() to format a device tree

path into a 32-byte stack buffer. Device tree paths are not limited to

this size, so a sufficiently long path can overflow the buffer.

Use snprintf() with the destination size to truncate the generated name

and keep the writes within bounds.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.0th percentile
Published
2026-09-25T15:17Z
References (3)
EPSS history
Timeline
  • 27 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 25 SEP 10:22Z
    drm/rockchip: analogix_dp: fix unchecked bound endpoint name length
    cvelistv5