All vulnerabilities
CVE-2026-98202

Linux: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 7% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4Also 84145a4a1dc58f8959811913c5f61f3235dd9f6c, 30366f507ce3e408caf7f7375bb343df54b9a4f9 and 1 moreCVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4LinuxCVE List
  • 84145a4a1dc58f8959811913c5f61f3235dd9f6cLinuxCVE List
  • 30366f507ce3e408caf7f7375bb343df54b9a4f9LinuxCVE List
  • 942b06a19252908d0f952c0590caf20e47f88252LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound

Transport drivers (such as rmi_i2c and rmi_spi) invoke rmi_driver_suspend() and rmi_driver_resume() on their child rmi_dev device during system power management events. However, transport drivers are fully registered and operational even if the physical RMI driver failed to bind or probe the rmi_dev device.

When rmi_driver_suspend() or rmi_driver_resume() is called on an unbound rmi_dev, dev_get_drvdata() returns NULL. Calling rmi_disable_irq() or rmi_enable_irq() without driver data attached causes a NULL pointer dereference and General Protection Fault when attempting to lock data->enabled_mutex.

Fix this by checking if driver data is attached to rmi_dev in rmi_driver_suspend() and rmi_driver_resume(), exiting early if no driver data is present.

Text from CVE List

Affected versions 18

  • Linuxaffected: 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56 before 7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4CVE List
  • Linuxaffected: 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56 before fafca210631d8c2d4311bdfccc5ec46b9fe65977CVE List
  • Linuxaffected: 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56 before 84145a4a1dc58f8959811913c5f61f3235dd9f6cCVE List
  • Linuxaffected: 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56 before e2b6703465c1ce43edb91c1626604b7092b3c431CVE List
  • Linuxaffected: 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56 before 30366f507ce3e408caf7f7375bb343df54b9a4f9CVE List
  • Linuxaffected: 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56 before fa1713dc3d43d028d6cb66e5659d9d7e83b73362CVE List
  • Linuxaffected: 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56 before 942b06a19252908d0f952c0590caf20e47f88252CVE List
  • Linuxaffected: 2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56 before fe10579b6dc3f0dac61e51e1797cacbba5039ac2CVE List
  • Linuxaffected: 4.6CVE List
  • Linuxunaffected: all versions before 4.6CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8