Buffer Overflow in Linux Kernel's Synaptics RMI4 Component

CVE-2026-80569

What is CVE-2026-80569?

The vulnerability in the Linux kernel affects the Synaptics RMI4 component, where an improper handling of report sizes can lead to a buffer overflow. Specifically, the function rmi_f54_work() reads diagnostic reports based on electrode counts, and if a malicious or malfunctioning device reports an incorrectly high number of electrodes, the calculated report size may exceed the allocated buffer. This scenario can cause memory corruption as the read loop attempts to write beyond the allocated boundaries of report_data. To safeguard against this issue, it is essential to verify that the report size conforms to the allocated buffer limits, thus preventing potential exploits associated with this flaw.

References