CVE-2026-80567

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue

Previously, rmi_f54_buffer_queue() waited for the worker thread to

finish but ignored whether it succeeded. If the worker failed (e.g.,

due to a timeout or register read failure), the queue thread would

silently return success, delivering stale or uninitialized memory to

userspace.

Add a 'report_error' field to struct f54_data to store the worker's exit

status. Check this field in rmi_f54_buffer_queue() after the worker

finishes, and mark the buffer as VB2_BUF_STATE_ERROR if an error

occurred.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References