Stack-based buffer overflow in Linux kernel - CVE-2026-97621

Vulnerability details

The vulnerability allows a local user to cause a stack-based buffer overflow.

The vulnerability exists due to improper bounds checking in rockchip_dp_drm_encoder_enable() when formatting a device tree path into a 32-byte stack buffer. A local user can supply a device tree path that exceeds the buffer size to cause a stack-based buffer overflow.

Affected software

How to mitigate CVE-2026-97621

External References

• https://git.kernel.org/stable/c/2fcd112caa4ebc64fdcb509f0b26d8daa3fac950
• https://git.kernel.org/stable/c/49f5268f43a791dd0d9ff554cce25a3685c7250b
• https://git.kernel.org/stable/c/bc69439d983cc491cc86e01fafc1deb94e1bb85e

Related Security Bulletins

• Stack-based buffer overflow in Linux kernel drm rockchip driver