01 Record

CVE-2026-80570

Input: synaptics-rmi4 - zero report size on F54 work error

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

Input: synaptics-rmi4 - zero report size on F54 work error

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 2.5% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Received. NVD last modified this record on 2026-08-27.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-26 14:37Z2 MO AGO

Last updated

2026-08-27 05:01Z2 MO AGO

Reserved

2026-08-26

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-805Buffer Access with Incorrect Length ValueBase

Data version

5.2

Document digest

ce60ea7037dcde20730396e53f8d1b7ecd2768f682328868196649aa18e88c72

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < 62079c17ec07d64362bec367ee7a525b0dbf6bf9, 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < 79521ed3cc9ea48476666ccacf45ecd6954b29a4, 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < c669c64ab71afa7b467c4d7e18f6a05e96b97a1f, 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < 77749685e55da19b187df215b5da4080842ca5c7, 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < c6cfda79f26c69e97db9805808c3b44d02227b4b, 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < b28593a05afdd812b590e1045b5bd862a5869225, 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < 88c8174d72900d77fbdf2f527d54b6ff2da876a8, 3a762dbd5347514c3cb2ac756a92a3d1c7646a2d to < dc76c3c8e8ad09362b8c1561f3928288c15cba2e, 4.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/62079c17ec07d64362bec367ee7a525b0dbf6bf9
git.kernel.orghttps://git.kernel.org/stable/c/79521ed3cc9ea48476666ccacf45ecd6954b29a4
git.kernel.orghttps://git.kernel.org/stable/c/c669c64ab71afa7b467c4d7e18f6a05e96b97a1f
git.kernel.orghttps://git.kernel.org/stable/c/77749685e55da19b187df215b5da4080842ca5c7
git.kernel.orghttps://git.kernel.org/stable/c/c6cfda79f26c69e97db9805808c3b44d02227b4b
git.kernel.orghttps://git.kernel.org/stable/c/b28593a05afdd812b590e1045b5bd862a5869225
git.kernel.orghttps://git.kernel.org/stable/c/88c8174d72900d77fbdf2f527d54b6ff2da876a8
git.kernel.orghttps://git.kernel.org/stable/c/dc76c3c8e8ad09362b8c1561f3928288c15cba2e

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.107-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.105-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.10-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.