CVE-2026-72076: Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
In the Linux kernel, the following vulnerability has been resolved:
Input: ims-pcu - fix out-of-bounds read in imspcuirq() debug logging
The debug logging in imspcuirq() unconditionally prints data from pcu->urbinbuf. However, if the interrupt fired for pcu->urbctrl, the actual data resides in pcu->urbctrlbuf. If urb->actuallength for the control URB exceeds pcu->maxinsize, this leads to an out-of-bounds read.
Fix this by printing from the correct buffer associated with the URB.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72076?
The severity of CVE-2026-72076 is rated at 15.
What is the vulnerability CVE-2026-72076 about?
CVE-2026-72076 addresses an out-of-bounds read issue in the ims_pcu_irq() debug logging within the Linux kernel.
How do I fix CVE-2026-72076?
To fix CVE-2026-72076, update your Linux kernel to the latest patched version that resolves this vulnerability.
Who is affected by CVE-2026-72076?
Any systems running the vulnerable versions of the Linux kernel with the ims-pcu driver are at risk from CVE-2026-72076.
What can exploitation of CVE-2026-72076 lead to?
Exploitation of CVE-2026-72076 may lead to unauthorized access or crashes due to the out-of-bounds read.