« Volver al listado

CVE-2026-72076

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging

The debug logging in ims_pcu_irq() unconditionally prints data from pcu->urb_in_buf. However, if the interrupt fired for pcu->urb_ctrl, the actual data resides in pcu->urb_ctrl_buf. If urb->actual_length for the control URB exceeds pcu->max_in_size, this leads to an out-of-bounds read.

Fix this by printing from the correct buffer associated with the URB.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-72076",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "628329d52474323938a03826941e166bc7c8eff4",
              "lessThan": "4d2553e9a76a11500ec670cbe16b7fd3da4832de",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "628329d52474323938a03826941e166bc7c8eff4",
              "lessThan": "b746e853721dee91e4234c033d1b90f4605705bb",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "628329d52474323938a03826941e166bc7c8eff4",
              "lessThan": "e6153407d7edabc6ff98f0fda415d556c0bcb57a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "628329d52474323938a03826941e166bc7c8eff4",
              "lessThan": "3fd7c0ace245334f2a0bd29fdcb680ad56e9b275",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "628329d52474323938a03826941e166bc7c8eff4",
              "lessThan": "20fbf3ca0259d00664d1ede88837e1f11b49a88e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "628329d52474323938a03826941e166bc7c8eff4",
              "lessThan": "9c964fc9507aeab74376ba9f892cf84ad6950dfe",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "628329d52474323938a03826941e166bc7c8eff4",
              "lessThan": "f97bfc1a0766802a99167b3dc62d1ee7dca929fe",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "628329d52474323938a03826941e166bc7c8eff4",
              "lessThan": "403b0a6970b1084bb27907c0f8225801fdd0fe1d",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/input/misc/ims-pcu.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.10"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "3.10",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/input/misc/ims-pcu.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-08-15T06:21:17.537",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/20fbf3ca0259d00664d1ede88837e1f11b49a88e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/3fd7c0ace245334f2a0bd29fdcb680ad56e9b275",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/403b0a6970b1084bb27907c0f8225801fdd0fe1d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/4d2553e9a76a11500ec670cbe16b7fd3da4832de",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9c964fc9507aeab74376ba9f892cf84ad6950dfe",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b746e853721dee91e4234c033d1b90f4605705bb",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e6153407d7edabc6ff98f0fda415d556c0bcb57a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f97bfc1a0766802a99167b3dc62d1ee7dca929fe",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging\n\nThe debug logging in ims_pcu_irq() unconditionally prints data from\npcu->urb_in_buf. However, if the interrupt fired for pcu->urb_ctrl, the\nactual data resides in pcu->urb_ctrl_buf. If urb->actual_length for the\ncontrol URB exceeds pcu->max_in_size, this leads to an out-of-bounds\nread.\n\nFix this by printing from the correct buffer associated with the URB."
    }
  ],
  "lastModified": "2026-08-17T06:18:06.300",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}