Heap Buffer Overflow in Linux Kernel Affects Synaptics RMI4

CVE-2026-80570

What is CVE-2026-80570?

A vulnerability in the Synaptics RMI4 component of the Linux kernel allows for a heap buffer overflow due to incorrect error handling. When an error occurs during the report request or command verification process, the system improperly bypasses the intended error handling route, leaving the previous payload size intact. This can lead to issues when the V4L2 format is altered, as a subsequent failure may cause the system to copy a stale larger payload size to a smaller buffer, resulting in a buffer overflow. The vulnerability has been addressed by ensuring that the payload size is reset to zero on failure, thus preventing exploitation.

References