Cloudanix VulnDB

CVE-2026-93193

None

CVSS

—

EPSS

0.2%

Published

Sep 17, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A minor bookkeeping error when handling certain graphics hardware connections can slowly leak memory on affected devices, eventually making systems less stable.

Exploitation
Local Privilege
Attacker needs
Low Privilege
Complexity
Theoretical
Impact
Denial Of Service
Component
OS kernel
Class
Other
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Reference count leak on device tree nodes in the Rockchip analogix DP encoder enable path, where of_get_child_by_name acquires a node reference that is not symmetrically released on all code paths.

Why it matters to the business

Systems using affected Rockchip display hardware may experience gradual memory exhaustion under repeated display configuration events, leading to reduced stability and eventual need for reboots or service restarts.

How an attack unfolds

An attacker with the ability to trigger repeated encoder enable operations (via display hotplug, mode setting, or userspace graphics APIs) can cause the unreleased node references to accumulate; the low exploitability stems from the requirement for sustained triggering and the limited impact of the resulting resource leak.

How to fix it

Update the Linux kernel to a version containing the referenced cleanup fix that applies __free(device_node) to all device nodes obtained via of_get_child_by_name in the affected function.

How to confirm the fix worked

Inspect the drm/rockchip/analogix_dp.c source for the presence of the __free(device_node) annotation on nodes obtained in rockchip_dp_drm_encoder_enable, or verify the running kernel contains the commit that introduced the auto-cleanup change.

Typical attack path

  1. Obtain local or remote access sufficient to initiate display configuration changes
  2. Repeatedly invoke paths that call rockchip_dp_drm_encoder_enable
  3. Accumulate leaked device node references until kernel memory pressure occurs

How to detect it

Review kernel logs and memory accounting for repeated acquisition of device-tree child nodes inside the analogix DP driver without matching release operations; correlate with display enable events.

What your security team should do

  • Prioritize kernel updates on all Rockchip-based systems once a fixed version is available
  • Monitor memory usage trends in the graphics and device-tree subsystems for unexpected growth
  • Review downstream kernel distributions for backported fixes given the wide use of Rockchip SoCs

The record

In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup Sashiko reported a reference leak in rockchip_dp_drm_encoder_enable(), the of_get_child_by_name() function does not call of_node_put() in a symmetrical way [1]. Fix the device node reference leak by using __free(device_node) to automatically manage of_node_put() for all device nodes.

Affected packages

Ecosystem Package Introduced Fixed