CVE-2026-64276 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

🗓️ 25 Jul 2026 08:49:21Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Resolved synaptics-rmi4 F30 keymap bound to GPIO/LED count causing out-of-bounds reads when gpioled_count exceeds six.

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2026-64276	25 Jul 202608:49	–	cve
Cvelist	CVE-2026-64276 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count	25 Jul 202608:49	–	cvelist
Debian CVE	CVE-2026-64276	25 Jul 202608:49	–	debiancve
EUVD	EUVD-2026-48988	25 Jul 202608:49	–	euvd
NVD	CVE-2026-64276	25 Jul 202610:17	–	nvd
OSV	DEBIAN-CVE-2026-64276	25 Jul 202610:17	–	osv
OSV	ECHO-6A16-AD63-DCEF	26 Jul 202602:26	–	osv
Positive Technologies	PT-2026-64497	25 Jul 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-64276	25 Jul 202616:46	–	susecve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-64276	25 Jul 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/26c895928d7118436a24f564587cb4aefc40cdd8
git	www.git.kernel.org/stable/c/4e3689c26854356f41fbaa1eafa382e58ac79e00
git	www.git.kernel.org/stable/c/8c6d18d61bb6fe0e6edf848413391c590552e8a9
git	www.git.kernel.org/stable/c/bfe622efecd4ff0a792d0ecd1a8dce535a902f50
git	www.git.kernel.org/stable/c/d162a1ead7de404d8b41a093c83ed0db6487cded
git	www.git.kernel.org/stable/c/d577e46785d45484b2ab7e7309c49b18764bf56c
git	www.git.kernel.org/stable/c/e849c6f51e6877104c765da084e001ec37c8e119
git	www.git.kernel.org/stable/c/f0be9eba946e9200b43265e0a748d38bd0a56954
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64276.json

26 Jul 2026 05:17Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.0022