CVE-2026-64276

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write to unauthorized memory regions. This could result in information disclosure or potentially allow for further system compromise.

This vulnerability is rated as having Moderate impact on Red Hat Enterprise Linux because exploitation requires local access alongside specialized hardware prerequisites, specifically a manipulated Synaptics RMI4 input peripheral. Typical enterprise server and cloud environments do not utilize RMI4-based input devices, substantially limiting exposure across standard deployments. Successful exploitation requires an attacker to possess physical access to connect a crafted device or high local privileges to execute ioctls on the input device interface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.