CVE-2026-89721

A flaw was found in the Linux kernel's phy: rockchip-samsung-dcphy component. A local attacker with access to the regmap debugfs interface could trigger an out-of-bounds read by attempting to dump registers. This occurs because the max_register value is incorrectly set, causing the system to read beyond the allocated memory region. Successful exploitation leads to a kernel crash (oops) and a subsequent deadlock of physical layer (PHY) operations, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.