Veille CVE

‹ Retour à la liste

CVE-2026-97621

– Non évaluée

Publiée le 25/09/2026 à 13:17 · Modifiée le 19/10/2026 à 12:17 · Reçue · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: fix unchecked bound endpoint name length rockchip_dp_drm_encoder_enable() uses sprintf() to format a device tree path into a 32-byte stack buffer. Device tree paths are not limited to this size, so a sufficiently long path can overflow the buffer. Use snprintf() with the destination size to truncate the generated name and keep the writes within bounds.

Traduire en français

Produits concernés

Références

Ailleurs