CVE-2026-98202

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98202", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.324Z", "datePublished": "2026-10-06T08:44:40.045Z", "dateUpdated": "2026-10-19T09:15:33.226Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:15:33.226Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: synaptics-rmi4 - fix GPF in suspend and resume when unbound\n\nTransport drivers (such as rmi_i2c and rmi_spi) invoke\nrmi_driver_suspend() and rmi_driver_resume() on their child rmi_dev\ndevice during system power management events. However, transport drivers\nare fully registered and operational even if the physical RMI driver\nfailed to bind or probe the rmi_dev device.\n\nWhen rmi_driver_suspend() or rmi_driver_resume() is called on an unbound\nrmi_dev, dev_get_drvdata() returns NULL. Calling rmi_disable_irq() or\nrmi_enable_irq() without driver data attached causes a NULL pointer\ndereference and General Protection Fault when attempting to lock\ndata->enabled_mutex.\n\nFix this by checking if driver data is attached to rmi_dev in\nrmi_driver_suspend() and rmi_driver_resume(), exiting early if\nno driver data is present."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/input/rmi4/rmi_driver.c"], "versions": [{"version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "lessThan": "7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4", "status": "affected", "versionType": "git"}, {"version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "lessThan": "fafca210631d8c2d4311bdfccc5ec46b9fe65977", "status": "affected", "versionType": "git"}, {"version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "lessThan": "84145a4a1dc58f8959811913c5f61f3235dd9f6c", "status": "affected", "versionType": "git"}, {"version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "lessThan": "e2b6703465c1ce43edb91c1626604b7092b3c431", "status": "affected", "versionType": "git"}, {"version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "lessThan": "30366f507ce3e408caf7f7375bb343df54b9a4f9", "status": "affected", "versionType": "git"}, {"version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "lessThan": "fa1713dc3d43d028d6cb66e5659d9d7e83b73362", "status": "affected", "versionType": "git"}, {"version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "lessThan": "942b06a19252908d0f952c0590caf20e47f88252", "status": "affected", "versionType": "git"}, {"version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "lessThan": "fe10579b6dc3f0dac61e51e1797cacbba5039ac2", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/input/rmi4/rmi_driver.c"], "versions": [{"version": "4.6", "status": "affected"}, {"version": "0", "lessThan": "4.6", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.271", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.222", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.54", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.8", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "5.10.271"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "5.15.222"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "6.18.54"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "7.2.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4"}, {"url": "https://git.kernel.org/stable/c/fafca210631d8c2d4311bdfccc5ec46b9fe65977"}, {"url": "https://git.kernel.org/stable/c/84145a4a1dc58f8959811913c5f61f3235dd9f6c"}, {"url": "https://git.kernel.org/stable/c/e2b6703465c1ce43edb91c1626604b7092b3c431"}, {"url": "https://git.kernel.org/stable/c/30366f507ce3e408caf7f7375bb343df54b9a4f9"}, {"url": "https://git.kernel.org/stable/c/fa1713dc3d43d028d6cb66e5659d9d7e83b73362"}, {"url": "https://git.kernel.org/stable/c/942b06a19252908d0f952c0590caf20e47f88252"}, {"url": "https://git.kernel.org/stable/c/fe10579b6dc3f0dac61e51e1797cacbba5039ac2"}], "title": "Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/input/rmi4/rmi_driver.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4", "status": "affected", "version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "versionType": "git"}, {"lessThan": "fafca210631d8c2d4311bdfccc5ec46b9fe65977", "status": "affected", "version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "versionType": "git"}, {"lessThan": "84145a4a1dc58f8959811913c5f61f3235dd9f6c", "status": "affected", "version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "versionType": "git"}, {"lessThan": "e2b6703465c1ce43edb91c1626604b7092b3c431", "status": "affected", "version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "versionType": "git"}, {"lessThan": "30366f507ce3e408caf7f7375bb343df54b9a4f9", "status": "affected", "version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "versionType": "git"}, {"lessThan": "fa1713dc3d43d028d6cb66e5659d9d7e83b73362", "status": "affected", "version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "versionType": "git"}, {"lessThan": "942b06a19252908d0f952c0590caf20e47f88252", "status": "affected", "version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "versionType": "git"}, {"lessThan": "fe10579b6dc3f0dac61e51e1797cacbba5039ac2", "status": "affected", "version": "2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/input/rmi4/rmi_driver.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.6"}, {"lessThan": "4.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.271", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.222", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.54", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: synaptics-rmi4 - fix GPF in suspend and resume when unbound\n\nTransport drivers (such as rmi_i2c and rmi_spi) invoke\nrmi_driver_suspend() and rmi_driver_resume() on their child rmi_dev\ndevice during system power management events. However, transport drivers\nare fully registered and operational even if the physical RMI driver\nfailed to bind or probe the rmi_dev device.\n\nWhen rmi_driver_suspend() or rmi_driver_resume() is called on an unbound\nrmi_dev, dev_get_drvdata() returns NULL. Calling rmi_disable_irq() or\nrmi_enable_irq() without driver data attached causes a NULL pointer\ndereference and General Protection Fault when attempting to lock\ndata->enabled_mutex.\n\nFix this by checking if driver data is attached to rmi_dev in\nrmi_driver_suspend() and rmi_driver_resume(), exiting early if\nno driver data is present."}], "id": "CVE-2026-98202", "lastModified": "2026-10-19T10:18:20.847", "metrics": {}, "published": "2026-10-06T09:18:06.067", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/30366f507ce3e408caf7f7375bb343df54b9a4f9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/84145a4a1dc58f8959811913c5f61f3235dd9f6c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/942b06a19252908d0f952c0590caf20e47f88252"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e2b6703465c1ce43edb91c1626604b7092b3c431"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fa1713dc3d43d028d6cb66e5659d9d7e83b73362"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fafca210631d8c2d4311bdfccc5ec46b9fe65977"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/fe10579b6dc3f0dac61e51e1797cacbba5039ac2"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound", "id": "2546478", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2546478"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-476", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nInput: synaptics-rmi4 - fix GPF in suspend and resume when unbound\nTransport drivers (such as rmi_i2c and rmi_spi) invoke\nrmi_driver_suspend() and rmi_driver_resume() on their child rmi_dev\ndevice during system power management events. However, transport drivers\nare fully registered and operational even if the physical RMI driver\nfailed to bind or probe the rmi_dev device.\nWhen rmi_driver_suspend() or rmi_driver_resume() is called on an unbound\nrmi_dev, dev_get_drvdata() returns NULL. Calling rmi_disable_irq() or\nrmi_enable_irq() without driver data attached causes a NULL pointer\ndereference and General Protection Fault when attempting to lock\ndata->enabled_mutex.\nFix this by checking if driver data is attached to rmi_dev in\nrmi_driver_suspend() and rmi_driver_resume(), exiting early if\nno driver data is present.", "A flaw was found in the Linux kernel's Synaptics RMI4 input driver. When system power management operations such as suspend or resume occur while an RMI4 device remains unbound, the driver attempts to access uninitialized driver data without proper verification. This issue leads to a null pointer dereference and general protection fault, allowing a local attacker to cause a system crash and resulting in a Denial of Service (DoS)."], "name": "CVE-2026-98202", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98202\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98202\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98202.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56,7a3d7c68aa36f68e2a4824da4782c0e5d7c4eba4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56,fafca210631d8c2d4311bdfccc5ec46b9fe65977)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56,84145a4a1dc58f8959811913c5f61f3235dd9f6c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56,e2b6703465c1ce43edb91c1626604b7092b3c431)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56,30366f507ce3e408caf7f7375bb343df54b9a4f9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56,fa1713dc3d43d028d6cb66e5659d9d7e83b73362)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56,942b06a19252908d0f952c0590caf20e47f88252)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[2b6a321da9a2d8725a1d3dbb0b2e96a7618ebe56,fe10579b6dc3f0dac61e51e1797cacbba5039ac2)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,4.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.271,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.222,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.189,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.158,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.112,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.54,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.8,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.3-rc4,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-06T15:00:17.483741+00:00", "updated": "2026-10-09T14:00:07.543922+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-476"]}