CVE-2026-80570

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A heap buffer overflow exists in the synaptics-rmi4 driver. In the rmi f54 work() function, an error during report request or command verification causes the code to bypass the logic that zeros out the f54->report size variable. This results in the variable retaining a stale, larger payload size. If the V4L2 format is subsequently changed to a smaller size and another failure occurs, the rmi f54 buffer queue() function copies the larger stale size into the smaller V4L2 buffer, leading to the overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.