SB20261007159 - NULL pointer dereference in Linux kernel input rmi4 driver
Published: October 7, 2026
Security Bulletin ID
SB20261007159
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Partial DoS
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2026-98202)
CWE-ID: CWE-476 - NULL Pointer Dereference
CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a null pointer dereference in the synaptics-rmi4 driver's rmi_driver_suspend() and rmi_driver_resume() functions when handling system power management events for an unbound RMI device. A local user can trigger system suspend or resume to cause a denial of service.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/30366f507ce3e408caf7f7375bb343df54b9a4f9
- https://git.kernel.org/stable/c/7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4
- https://git.kernel.org/stable/c/84145a4a1dc58f8959811913c5f61f3235dd9f6c
- https://git.kernel.org/stable/c/942b06a19252908d0f952c0590caf20e47f88252
- https://git.kernel.org/stable/c/e2b6703465c1ce43edb91c1626604b7092b3c431
- https://git.kernel.org/stable/c/fa1713dc3d43d028d6cb66e5659d9d7e83b73362
- https://git.kernel.org/stable/c/fafca210631d8c2d4311bdfccc5ec46b9fe65977
- https://git.kernel.org/stable/c/fe10579b6dc3f0dac61e51e1797cacbba5039ac2