CVE-2026-80567
Received Received - Intake

Linux Kernel F54 Worker Error Propagation in V4L2

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Previously, rmi_f54_buffer_queue() waited for the worker thread to finish but ignored whether it succeeded. If the worker failed (e.g., due to a timeout or register read failure), the queue thread would silently return success, delivering stale or uninitialized memory to userspace. Add a 'report_error' field to struct f54_data to store the worker's exit status. Check this field in rmi_f54_buffer_queue() after the worker finishes, and mark the buffer as VB2_BUF_STATE_ERROR if an error occurred.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80567
EUVD
EUVD-2026-66482

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the synaptics-rmi4 driver. The issue occurs in the F54 worker thread handling for V4L2 queues. Previously, the system would ignore errors from the worker thread, such as timeouts or register read failures. This could lead to stale or uninitialized memory being sent to userspace, potentially causing undefined behavior or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's synaptics-rmi4 driver and involves errors in the F54 worker thread. Detection requires checking kernel logs for F54-related errors or timeouts during input device operations. Monitor dmesg or journalctl for messages related to rmi_f54_buffer_queue or synaptics-rmi4.

Impact Analysis

If exploited, this vulnerability could allow an attacker to cause system instability, crashes, or unexpected behavior by triggering errors in the synaptics-rmi4 driver. Users might experience application failures, kernel panics, or data corruption if the driver processes invalid memory.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this vulnerability. If immediate patching is not possible, disable the synaptics-rmi4 driver or input devices using it until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80567. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart