CVE-2026-89721Medium· 5.5▾ SunlitA flaw was found in the Linux kernel's `phy: rockchip-samsung-dcphy` component. A local attacker with access to the `regmap debugfs` interface could trigger an out-of-bounds read by attempting to dump registers. This occurs because the `ma…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
— → 4.1
none → medium
— → 4.1
none → medium
— → 4.1
none → medium
Last analysed / modified upstream
4.1 → 5.5
0.2% → 0.2%
A flaw was found in the Linux kernel's phy: rockchip-samsung-dcphy component. A local attacker with access to the regmap debugfs interface could trigger an out-of-bounds read by attempting to dump registers. This occurs because the max_register value is incorrectly set, causing the system to read beyond the allocated memory region. Successful exploitation leads to a kernel crash (oops) and a subsequent deadlock of physical layer (PHY) operations, resulting in a denial of service.
kernel: phy: rockchip-samsung-dcphy: fix out-of-range max_register — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-21.
Not affected:
Refer to the advisory for fix availability.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-80958Medium· 5.5kernel: dm-pcache: clamp the tail kset read to the segment data region (CVE-2026-80958)
CVE-2026-80959Medium· 5.5kernel: dm-pcache: bound the persisted tail-position offset (CVE-2026-80959)
CVE-2026-80962Medium· 5.5kernel: dm-pcache: validate geometry fields from on-disk cache_info (CVE-2026-80962)
CVE-2026-89571Medium· 5.5kernel: cxl/features: bound fwctl command payload to the input buffer (CVE-2026-89571)
CVE-2026-89614Medium· 5.5kernel: ntfs: bound the free-cluster bitmap scan to the volume (CVE-2026-89614)
CVE-2026-89743Medium· 5.5kernel: misc: nsm: bound the device-reported response length (CVE-2026-89743)