CVE-2026-80754

CVE-2026-80754 is a copy-paste typo in the Linux kernel's Synaptics RMI4 touchpad/touchscreen driver: during F55 sensor detection, the transmitter (TX) electrode count is incorrectly assigned the receiver (RX) electrode count. On touch controllers with more RX than TX electrodes, the inflated TX count propagates into the F54 diagnostics code, which then computes an oversized diagnostics report size and can perform out-of-bounds buffer accesses. A local attacker with low privileges could potentially crash the kernel (denial of service) or, at worst, exploit the memory corruption for privilege escalation; the 7.8 CVSS score reflects a local attack vector with high confidentiality, integrity and availability impact. Only Linux systems whose hardware binds the Synaptics RMI4 driver — mainly certain laptops, Chromebooks and embedded devices with RMI4 touch controllers — and only geometries with more RX than TX electrodes are affected. No public proof-of-concept, no CISA KEV listing, and an EPSS of 0.2% (6th percentile) indicate no known exploitation at this time.

What to do: Apply the upstream kernel fix via your distribution's kernel updates (the source data does not list specific fixed version numbers). Scope exposure by checking whether systems load the rmi4 driver (dmesg output mentioning 'rmi4'/'synaptics' with F55/F54 messages) and whether the touch controller has more RX than TX electrodes. Given the local-only attack vector, no public PoC, and no known in-the-wild exploitation, patch in the next routine kernel maintenance cycle rather than as an emergency.