CVE-2026-80567

A flaw was found in the Linux kernel. The synaptics-rmi4 input driver's rmi_f54_buffer_queue() function failed to propagate errors from its worker thread. This oversight could result in the delivery of stale or uninitialized memory to user applications, potentially leading to information disclosure or system instability.

A MODERATE severity flaw was found in the Linux kernel's synaptics-rmi4 input driver, which Red Hat ships as part of the kernel and kernel-rt components of Red Hat Enterprise Linux and the kernel components of Red Hat In-Vehicle OS. The driver's rmi_f54_buffer_queue() function, which serves F54 diagnostic data to userspace through a V4L2 video queue, waited for its worker thread to finish but ignored whether the worker had succeeded. When the worker failed, for example due to a timeout or a register read failure, the queue thread silently reported success and delivered stale or uninitialized kernel memory to user applications, which could lead to information disclosure or system instability. Red Hat rated this flaw MODERATE with CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H): a low-privileged local user on a system whose input device is handled by the synaptics-rmi4 driver could trigger the faulty path, and the Red Hat score rates availability as the impact dimension even though the underlying defect can also expose stale or uninitialized memory. All Red Hat Enterprise Linux 6 through 10 kernel and kernel-rt update streams and all Red Hat In-Vehicle OS kernel components have been assessed as NOT affected because the vulnerable code is not present in these shipped builds, so no Red Hat product is exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.