The Linux kernel’s Rockchip analogix DP DRM driver writes a device‑tree path into a 32‑byte stack buffer using sprintf without bounds checking. Because device‑tree paths can be arbitrarily long, a crafted path can overflow this buffer, leading to a stack buffer overflow that can corrupt execution flow or crash the kernel. This vulnerability is represented by CWE-120.

The issue affects all Linux kernel releases that contain the rockchip analogix DP DRM driver before the patch that replaces sprintf with snprintf. The kernel version range is not specified in the advisory, so any kernel built from source that includes the unpatched driver code is potentially vulnerable. The vulnerability is present in the Linux kernel implementation for Rockchip hardware.

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1 % suggests a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. An attacker would need to supply a device-tree entry with a path longer than 32 bytes, which typically requires local privileged access or the ability to modify the system’s device tree during boot. Successful exploitation could lead to arbitrary code execution in kernel mode or a denial‑of‑service by crashing the kernel.