CVE-2026-80754 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
A typo in the Synaptics RMI4 driver causes incorrect buffer size calculations, potentially leading to out-of-bounds memory access and system instability.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80754?
CVE-2026-80754 is a high-severity memory corruption vulnerability in Linux, published on 3 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
During F55 sensor detection, the transmitter (TX) electrode count was incorrectly assigned the value of the receiver (RX) electrode count due to copy-paste typos.
This incorrect value was then propagated to the driver data and used by F54 to determine the diagnostics report size. On devices with more RX than TX electrodes, this inflated the perceived TX count, leading to incorrect report size calculations and potential out-of-bounds buffer accesses.
Fix the typos by correctly assigning the TX electrode counts.
Which versions are affected by CVE-2026-80754?
How do I fix CVE-2026-80754?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-80754 being exploited?
There is no known exploitation of CVE-2026-80754 in the wild and no public exploit code.
Sources
Also known as AZL-99032, BELL-CVE-2026-80754, DEBIAN-CVE-2026-80754, GHSA-v4rj-p772-hjqg, UBUNTU-CVE-2026-80754.