In the Linux kernel, the following vulnerability has been resolved:
Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
Previously, rmif54buffer_queue() waited for the worker thread to finish but ignored whether it succeeded. If the worker failed (e.g., due to a timeout or register read failure), the queue thread would silently return success, delivering stale or uninitialized memory to userspace.
Add a 'reporterror' field to struct f54data to store the worker's exit status. Check this field in rmif54bufferqueue() after the worker finishes, and mark the buffer as VB2BUFSTATEERROR if an error occurred.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80567.json",
"cna_assigner": "Linux"
}