CVE-2026-64277

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. The rmi_f3a_map_gpios() function incorrectly allocates memory for the gpio_key_map, making it smaller than required. This allows a device reporting a specific gpio_count value to trigger an out-of-bounds read, leading to information disclosure by leaking adjacent slab memory to user space. Additionally, a local user with access to the evdev node can exploit this vulnerability to perform out-of-bounds writes with caller-controlled values, which may lead to further system compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.