6 matches found
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
...
CVE-2026-64276
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6 entries, but rmif30attention iterates the full f30-gpioledcount devic...
CVE-2026-64276
CVE-2026-64276 affects the Linux kernel synaptics-rmi4 input driver. The F30/GP I/O mapping code incorrectly allocated gpioled_key_map for at most 6 entries but later iterated up to gpioled_count (0..31) and advanced input->keycodemax to the full count, risking out-of-bounds reads in the atten...
CVE-2026-64276 Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6 entries, but rmif30attention iterates the full f30-gpioledcount devic...
EUVD-2026-48988
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6 entries, but rmif30attention iterates the full f30-gpioledcount devic...