Unrated severityNVD Advisory· Published Sep 25, 2026· Updated Oct 19, 2026
CVE-2026-97621
CVE-2026-97621
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/rockchip: analogix_dp: fix unchecked bound endpoint name length
rockchip_dp_drm_encoder_enable() uses sprintf() to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficiently long path can overflow the buffer.
Use snprintf() with the destination size to truncate the generated name and keep the writes within bounds.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
>= 6.16.0, < 6.18.53+ 1 more
- (no CPE)range: >= 6.16.0, < 6.18.53
- (no CPE)range: < 7.2.9-1.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.