CVE-2026-72077: Input: ims-pcu - fix firmware leak in async update
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
Input: ims-pcu - fix firmware leak in async update
The firmware object was not being released if validation failed. Use free(firmware) to ensure the firmware is always released.
Event History
Aug 15, 2026
CVE Published
via MITRE·05:52 AM
Data Sourced
via MITRE·05:52 AM
Description
Data Sourced
via NVD·06:21 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2026-72077?
The severity of CVE-2026-72077 is rated as 7 on the CVSS scale.
2
How do I fix CVE-2026-72077?
To fix CVE-2026-72077, ensure the firmware is always released using __free(firmware) in the code.
3
What systems are affected by CVE-2026-72077?
CVE-2026-72077 affects the Linux kernel, particularly in the context of the ims-pcu driver.
4
What are the risks associated with CVE-2026-72077?
The risks associated with CVE-2026-72077 include potential memory leaks and system instability.
5
When was CVE-2026-72077 published?
CVE-2026-72077 was published on August 15, 2026.