CVE-2019-9730

CVE-2019-9730：Synaptics 音频驱动程序本地权限提升 此驱动程序包中的漏洞存在于 CxUtilSvc 系统服务中。它托管了一个 COM 对象，低权限代码可以利用该对象以 SYSTEM 身份对注册表执行任意读取和写入。该 .NET 代码添加了 IRegistryHelper COM 接口作为引用，以调用其方法。 在利用方面，采用了一种较为直接的方法：将给定服务的二进制路径替换为一条创建本地管理员账户的命令。虽然标准用户账户无法启动/停止每一个服务，但通常存在一小部分他们可以操控的服务（例如 ose）。如果无法立即启动某个服务，他们也可以重启系统。...

Linux Distros Unpatched Vulnerability : CVE-2026-80754

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the...

CVE-2026-80754

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

UBUNTU-CVE-2026-80754

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

AZL-99032 CVE-2026-80754 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

EUVD-2026-70358

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754

CVE-2026-80754 affects the Linux kernel synaptics-rmi4 input driver. During F55 sensor detection , the transmitter (TX) electrode count was incorrectly assigned the receiver (RX) value due to copy-paste typos . On devices where RX exceeds TX electrode counts, this inflated perceived TX count prop...

kernel: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. This vulnerability occurs because the driver incorrectly allocates memory for a keymap, leading to an out-of-bounds memory access. A local user with access to a specially crafted input device could exploit this to read or write t...

kernel: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. The rmif3amapgpios function incorrectly allocates memory for the gpiokeymap, making it smaller than required. This allows a device reporting a specific gpiocount value to trigger an out-of-bounds read, leading to information...

CVE-2026-80570

A flaw was found in the synaptics-rmi4 component of the Linux kernel. This vulnerability occurs when an error in processing a report request or command leads to an incorrect size being used for subsequent data operations. A local user could exploit this by manipulating the video format, causing t...

CVE-2026-80568

A flaw was found in the Linux kernel's synaptics-rmi4 input driver. Changing the diagnostic report type while a video stream V4L2 is active can alter the expected report size. Since V4L2 buffers are allocated based on the initial size at stream start, a larger subsequent report could lead to a he...

kernel-rt security, bug fix, and enhancement update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

CVE-2026-80569

A flaw was found in the synaptics-rmi4 driver within the Linux kernel. A malicious or malfunctioning RMI4 device can exploit this vulnerability by reporting incorrect electrode counts. This leads to the driver attempting to write data beyond the allocated memory buffer, causing memory corruption...

CVE-2026-80567

A flaw was found in the Linux kernel. The synaptics-rmi4 input driver's rmif54bufferqueue function failed to propagate errors from its worker thread. This oversight could result in the delivery of stale or uninitialized memory to user applications, potentially leading to information disclosure or...

EUVD-2026-66483

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...

EUVD-2026-66484

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...

EUVD-2026-66485

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...