一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-80568 [HIGH] – In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

Input: synaptics-rmi4 – block s_input when F54 queue is busy

Changing the input (diagnostic report type) mid-stream changes the
report size. Since V4L2 buffers are allocated based on the size at
stream start, changing the input while streaming could lead to a
heap buffer overflow if the new size is larger than the allocated
buffers.

Prevent this by blocking VIDIOC_S_INPUT with -EBUSY if the V4L2 queue
is busy (streaming).