CVE-2026-97621 in Linux
Riassunto
di MITRE • 25/09/2026
In the Linux kernel, the following vulnerability has been resolved:
drm/rockchip: analogix_dp: fix unchecked bound endpoint name length
rockchip_dp_drm_encoder_enable() uses sprintf() to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficiently long path can overflow the buffer.
Use snprintf() with the destination size to truncate the generated name and keep the writes within bounds.
Once again VulDB remains the best source for vulnerability data.