01 Record

CVE-2026-80569

Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 1.7% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Received. NVD last modified this record on 2026-08-27.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-26 14:37Z2 MO AGO

Last updated

2026-08-27 05:01Z2 MO AGO

Reserved

2026-08-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Base

Data version

5.2

Document digest

ba03c16d7c765f1a10623a87357ee7af4acffb3744e95d8e1b175ceb97c6041a

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc762cc68b6a12eedebefc156ea4838e54804e2eb to < 6b3bdd44d4cd7d5e35de1d0f06d4930f3cecd403, c762cc68b6a12eedebefc156ea4838e54804e2eb to < b2f596f00d27703ce09167201ba57f55be8d2f9a, c762cc68b6a12eedebefc156ea4838e54804e2eb to < b3932101c9c457148038392bc977f9b31e125a86, c762cc68b6a12eedebefc156ea4838e54804e2eb to < 12be3c6ca9589afd6ade41a59c761866e526634d, c762cc68b6a12eedebefc156ea4838e54804e2eb to < 42eaf0e6f79c487f419737314cf0760f7331d368, c762cc68b6a12eedebefc156ea4838e54804e2eb to < 6b06aab79ff166d5781ce792d91acc2e58b1770b, c762cc68b6a12eedebefc156ea4838e54804e2eb to < b7b9a8b1c303b62371698e396654d6724c79cb74, c762cc68b6a12eedebefc156ea4838e54804e2eb to < 49c5adc2b7d6e43c5cf033e1c86fdb9c16ababb1, 4.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/6b3bdd44d4cd7d5e35de1d0f06d4930f3cecd403
git.kernel.orghttps://git.kernel.org/stable/c/b2f596f00d27703ce09167201ba57f55be8d2f9a
git.kernel.orghttps://git.kernel.org/stable/c/b3932101c9c457148038392bc977f9b31e125a86
git.kernel.orghttps://git.kernel.org/stable/c/12be3c6ca9589afd6ade41a59c761866e526634d
git.kernel.orghttps://git.kernel.org/stable/c/42eaf0e6f79c487f419737314cf0760f7331d368
git.kernel.orghttps://git.kernel.org/stable/c/6b06aab79ff166d5781ce792d91acc2e58b1770b
git.kernel.orghttps://git.kernel.org/stable/c/b7b9a8b1c303b62371698e396654d6724c79cb74
git.kernel.orghttps://git.kernel.org/stable/c/49c5adc2b7d6e43c5cf033e1c86fdb9c16ababb1

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.107-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.105-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.