CVE-2026-98202

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound

Transport drivers (such as rmi_i2c and rmi_spi) invoke

rmi_driver_suspend() and rmi_driver_resume() on their child rmi_dev

device during system power management events. However, transport drivers

are fully registered and operational even if the physical RMI driver

failed to bind or probe the rmi_dev device.

When rmi_driver_suspend() or rmi_driver_resume() is called on an unbound

rmi_dev, dev_get_drvdata() returns NULL. Calling rmi_disable_irq() or

rmi_enable_irq() without driver data attached causes a NULL pointer

dereference and General Protection Fault when attempting to lock

data->enabled_mutex.

Fix this by checking if driver data is attached to rmi_dev in

rmi_driver_suspend() and rmi_driver_resume(), exiting early if

no driver data is present.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References