CVE-2026-97621
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: fix unchecked bound endpoint name length rockchip_dp_drm_encoder_enable() uses sprintf() to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficiently long path can overflow the buffer. Use snprintf() with the destination size to truncate the generated name and keep the writes within bounds.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 25, 2026
First seenSep 25, 2026
How to fix
Update
- Linux Linux49f5268f43a791dd0d9ff554cce25a3685c7250b, 2fcd112caa4ebc64fdcb509f0b26d8daa3fac950, bc69439d983cc491cc86e01fafc1deb94e1bb85e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 729f8eefdcadaff98606931e691910f17d8d59d6 ≤ v < 49f5268f43a791dd0d9ff554cce25a3685c7250b, 729f8eefdcadaff98606931e691910f17d8d59d6 ≤ v < 2fcd112caa4ebc64fdcb509f0b26d8daa3fac950, 729f8eefdcadaff98606931e691910f17d8d59d6 ≤ v < bc69439d983cc491cc86e01fafc1deb94e1bb85e, 6.16 | 49f5268f43a791dd0d9ff554cce25a3685c7250b, 2fcd112caa4ebc64fdcb509f0b26d8daa3fac950, bc69439d983cc491cc86e01fafc1deb94e1bb85e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.