What’s Vulnerable › Vulnerabilities

CVE-2026-89721: phy: rockchip-samsung-dcphy: fix out-of-range max_register

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-11 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range max_register The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xfffc. max_register names 0x10000, one register past the end of the mapping: dumping the registers through the regmap debugfs interface reads beyond the ioremapped region and oopses on the unmapped page. The oops fires with the regmap lock held, so later PHY operations deadlock.

Affected products

• Linux kernel: 6.15 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/14afe18655c0951f4f85898f761bf92264e65ccd
• https://git.kernel.org/stable/c/4486e75ba647bd8b98fc1f053101b40caceeed4b
• https://git.kernel.org/stable/c/c1a62f9dcf531d56c56da2e4435386b6d264c69f

Get alerted when CVE-2026-89721 or the next vulnerability affects your stack