linux-hwe-edge

linux-aws-5.0

linux-aws-5.3

linux-azure

linux-azure-5.3

linux-azure-edge

linux-gcp

linux-gcp-5.3

linux-gke-4.15

linux-gke-5.4

linux-gkeop-5.4

linux-hwe

linux-oem

linux-oracle-5.0

linux-oracle-5.3

linux-aws-5.11

linux-aws-5.13

linux-aws-5.15

linux-aws-5.8

linux-azure-5.11

linux-azure-5.13

linux-azure-5.15

linux-azure-5.8

linux-azure-fde

linux-azure-fde-5.15

linux-gcp-5.11

linux-gcp-5.13

linux-gcp-5.15

linux-gcp-5.8

linux-gke

linux-gke-5.15

linux-gkeop

linux-gkeop-5.15

linux-hwe-5.11

linux-hwe-5.13

linux-hwe-5.15

linux-hwe-5.8

linux-ibm-5.15

linux-intel-5.13

linux-intel-iotg-5.15

linux-lowlatency-hwe-5.15

linux-nvidia-tegra-5.15

linux-oem-5.10

linux-oem-5.13

linux-oem-5.14

linux-oem-5.6

linux-oracle-5.11

linux-oracle-5.13

linux-oracle-5.15

linux-oracle-5.8

linux-raspi2

linux-riscv

linux-riscv-5.11

linux-riscv-5.15

linux-riscv-5.8

linux

linux-allwinner-5.19

linux-aws

linux-aws-5.19

linux-aws-6.2

linux-aws-6.5

linux-aws-6.8

linux-azure-5.19

linux-azure-6.2

linux-azure-6.5

linux-azure-6.8

linux-azure-fde-5.19

linux-azure-fde-6.2

linux-azure-fde-6.8

linux-gcp-5.19

linux-gcp-6.2

linux-gcp-6.5

linux-gcp-6.8

linux-hwe-5.19

linux-hwe-6.2

linux-hwe-6.5

linux-hwe-6.8

linux-ibm

linux-ibm-6.8

linux-intel-iot-realtime

linux-intel-iotg

linux-kvm

linux-lowlatency

linux-lowlatency-hwe-5.19

linux-lowlatency-hwe-6.2

linux-lowlatency-hwe-6.5

linux-lowlatency-hwe-6.8

linux-nvidia

linux-nvidia-6.2

linux-nvidia-6.5

linux-nvidia-6.8

linux-nvidia-tegra

linux-nvidia-tegra-igx

linux-oem-5.17

CVE-2026-64277 is a vulnerability in the Linux kernel's synaptics-rmi4 input driver where the F3A keymap allocation does not properly bound the size to the GPIO count. This results in out-of-bounds reads and writes when a device reports a gpio_count greater than 6, potentially leaking kernel memory to user space or allowing unauthorized writes. The issue affects multiple Linux kernel versions prior to 5.15.0-1117.124~20.04.1 and similar builds. A fix has been released in Linux kernel versions 5.15.0-1117.124~20.04.1 and later.

CVE-2026-64277: Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count in Linux kernel

A vulnerability in the Linux kernel's synaptics-rmi4 input driver allowed out-of-bounds memory access due to improper sizing of a keymap array. This flaw could lead to information leakage and arbitrary memory writes by local users able to access the evdev input device. The issue has been fixed by correctly sizing the keymap array to the full GPIO count. Multiple Linux kernel versions are affected, and patches are available.

CVE-2026-64277 is a high-severity vulnerability in the Linux kernel's synaptics-rmi4 input driver. It arises from an out-of-bounds read and write due to improper sizing of the F3A keymap array relative to the GPIO count reported by the device. This flaw can lead to memory disclosure and arbitrary memory modification by any process able to open the evdev node.

Search: CVE-2026-64277