CVE-2026-80567Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Previously, rmi_f54_buffer_queue() waited for the worker thread to finish but ignored whether it succeeded. If the worker failed (e.g., due to a timeout or register read failure), the queue thread would silently return success, delivering stale or uninitialized memory to userspace. Add a 'report_error' field to struct f54_data to store the worker's exit status. Check this field in rmi_f54_buffer_queue() after the worker finishes, and mark the buffer as VB2_BUF_STATE_ERROR if an error occurred.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 26, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d before 305c24ee25b6e08ac9f4c5f697e823cc638c38da; from 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d before 7d33b752e0df385b285492b74699fc73b6becdfb; from 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d before be56730b547737151f24357d832b04aaa93755d5; 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d builds before 2b0403fb7e28f65883cd03814b62c9aa9bc7f04d; from 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d before 6741a8c21d98088b7f2d9f4f86a706d311ce34a2; from 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d before 70f9aad3943559af6f32cb303744f35c05ce9cf1; from 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d before 9bbd3682f8a3e064271547133c37fcb17668d860; from 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d before 8786d74bf50e6797b6f655eb381ef6b25451161f | CNA record |
References
- https://git.kernel.org/stable/c/305c24ee25b6e08ac9f4c5f697e823cc638c38da
- https://git.kernel.org/stable/c/7d33b752e0df385b285492b74699fc73b6becdfb
- https://git.kernel.org/stable/c/be56730b547737151f24357d832b04aaa93755d5
- https://git.kernel.org/stable/c/2b0403fb7e28f65883cd03814b62c9aa9bc7f04d
- https://git.kernel.org/stable/c/6741a8c21d98088b7f2d9f4f86a706d311ce34a2
- https://git.kernel.org/stable/c/70f9aad3943559af6f32cb303744f35c05ce9cf1
- https://git.kernel.org/stable/c/9bbd3682f8a3e064271547133c37fcb17668d860
- https://git.kernel.org/stable/c/8786d74bf50e6797b6f655eb381ef6b25451161f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.