CVE-2026-98202
Received Received - Intake

General Protection Fault in Linux Kernel RMI4 Driver

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Transport drivers (such as rmi_i2c and rmi_spi) invoke rmi_driver_suspend() and rmi_driver_resume() on their child rmi_dev device during system power management events. However, transport drivers are fully registered and operational even if the physical RMI driver failed to bind or probe the rmi_dev device. When rmi_driver_suspend() or rmi_driver_resume() is called on an unbound rmi_dev, dev_get_drvdata() returns NULL. Calling rmi_disable_irq() or rmi_enable_irq() without driver data attached causes a NULL pointer dereference and General Protection Fault when attempting to lock data->enabled_mutex. Fix this by checking if driver data is attached to rmi_dev in rmi_driver_suspend() and rmi_driver_resume(), exiting early if no driver data is present.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-98202
EUVD
EUVD-2026-93130

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
Linux Linux 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56
Linux Linux 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56
Linux Linux 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56
Linux Linux 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56
Linux Linux 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56
Linux Linux 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56
Linux Linux 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56
Linux Linux 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56
Linux Linux 4.6

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a General Protection Fault (GPF) during system suspend and resume operations. It occurs when transport drivers like rmi_i2c or rmi_spi call suspend or resume functions on an unbound rmi_dev device. If the physical RMI driver fails to bind, dev_get_drvdata() returns NULL, leading to a NULL pointer dereference when rmi_disable_irq() or rmi_enable_irq() attempts to lock a mutex.

Detection Guidance

This vulnerability is specific to the Linux kernel's synaptics-rmi4 driver and can be detected by checking for kernel logs indicating a General Protection Fault (GPF) during suspend or resume operations. Look for errors related to rmi_driver_suspend or rmi_driver_resume in system logs.

Impact Analysis

This vulnerability can cause system crashes or instability during power management events like suspend or resume. If exploited, it may lead to kernel panics, data corruption, or denial of service, disrupting normal system operations.

Mitigation Strategies

Apply the kernel patch that fixes the issue by ensuring driver data is checked before suspend/resume operations. Update to a patched kernel version where this issue is resolved.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98202. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart