{"id":"CVE-2026-80754","revision":"a2c190a32a2b47b992697500e6f5dd43","records":[{"revision":"a2c190a32a2b47b992697500e6f5dd43","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-80754","aliases":[],"title":"Input: synaptics-rmi4 - fix F55 transmitter electrode count typo","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nInput: synaptics-rmi4 - fix F55 transmitter electrode count typo\n\nDuring F55 sensor detection, the transmitter (TX) electrode count was\nincorrectly assigned the value of the receiver (RX) electrode count\ndue to copy-paste typos.\n\nThis incorrect value was then propagated to the driver data and used\nby F54 to determine the diagnostics report size. On devices with more\nRX than TX electrodes, this inflated the perceived TX count, leading\nto incorrect report size calculations and potential out-of-bounds\nbuffer accesses.\n\nFix the typos by correctly assigning the TX electrode counts.","state":0,"publishedAt":"2026-09-03T08:26:33.18+00:00","modifiedAt":"2026-10-16T19:26:36.322+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/input/rmi4/rmi_f55.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6adba43fd222ea362c36296d1a6897c2e28fdc8e\",\n                            \"lessThan\": \"6484e00d6778fdf2209cd75940bc3902b276457f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6adba43fd222ea362c36296d1a6897c2e28fdc8e\",\n                            \"lessThan\": \"db4e20265ebda729610ca5cf45ca9437462c3f36\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6adba43fd222ea362c36296d1a6897c2e28fdc8e\",\n                            \"lessThan\": \"a6d9646e77da7cab2dff7043a8e9f75e23b836bc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6adba43fd222ea362c36296d1a6897c2e28fdc8e\",\n                            \"lessThan\": \"0739c65e799d4a93fe573ed23255a71fcfcc5438\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6adba43fd222ea362c36296d1a6897c2e28fdc8e\",\n                            \"lessThan\": \"9759502f5cd71805923457f183ae5b9533e20c7b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6adba43fd222ea362c36296d1a6897c2e28fdc8e\",\n                            \"lessThan\": \"9b184c8337c6e12df129399007735a7fbcbbcb7b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6adba43fd222ea362c36296d1a6897c2e28fdc8e\",\n                            \"lessThan\": \"a81cafe3c3c2f8494063385a7b0ea7ff407bf19f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6adba43fd222ea362c36296d1a6897c2e28fdc8e\",\n                            \"lessThan\": \"6058f0fea10f3caf63a435677358d1b8e9325114\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/input/rmi4/rmi_f55.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.10\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.10\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.266\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.217\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.184\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.153\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.105\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.46\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.10\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/6484e00d6778fdf2209cd75940bc3902b276457f","https://git.kernel.org/stable/c/db4e20265ebda729610ca5cf45ca9437462c3f36","https://git.kernel.org/stable/c/a6d9646e77da7cab2dff7043a8e9f75e23b836bc","https://git.kernel.org/stable/c/0739c65e799d4a93fe573ed23255a71fcfcc5438","https://git.kernel.org/stable/c/9759502f5cd71805923457f183ae5b9533e20c7b","https://git.kernel.org/stable/c/9b184c8337c6e12df129399007735a7fbcbbcb7b","https://git.kernel.org/stable/c/a81cafe3c3c2f8494063385a7b0ea7ff407bf19f","https://git.kernel.org/stable/c/6058f0fea10f3caf63a435677358d1b8e9325114"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-80754","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-80754","identifiers":["CVE-2026-80754"]},"retained":false,"historicalAffected":[]}],"coverage":[]}