PT-2026-82896

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ims-pcu driver where sysfs attributes are incorrectly exposed on all interfaces bound to the driver, including the secondary data interface. This occurs because th...

PT-2026-82895

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ims-pcu driver processes response data from device buffers without verifying if the device sent sufficient data. This flaw can result in out-of-bounds reads, where the system accesse...

CVE-2026-80596: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control interface When the driver was converted to use the driver core to instantiate device attributes via .devgroups in the usbdriver structure, the attributes started appearing ...

PT-2026-82894

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ims-pcu driver during the parsing of CDC union descriptors within the ims pcu get cdc union desc function. The driver iterates through extra descriptor data without...

CVE-2026-80594: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing The driver parses CDC union descriptors in imspcugetcdcuniondesc by iterating through the extra descriptor data. However, it does not verify that the...

CVE-2026-80595: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The driver processes response data from device buffers without verifying that the device actually sent enough data. This can lead to out-of-bounds reads or processing stale data. Add...

CVE-2026-64565

A flaw was found in the Linux kernel's ims-pcu component. A malicious USB device can send an oversized data packet, which is not properly handled. This can lead to a heap buffer overflow, allowing an attacker to manipulate internal pointers. Successful exploitation could result in a control flow...

Linux Distros Unpatched Vulnerability : CVE-2026-72078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint withou...

Linux Distros Unpatched Vulnerability : CVE-2026-72074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without...

Linux Distros Unpatched Vulnerability : CVE-2026-72079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix use-after-free and double-free in disconnect imspcudisconnect only intended to perform cleanup when the primary control interface is unboun...

Linux Distros Unpatched Vulnerability : CVE-2026-72076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix out-of-bounds read in imspcuirq debug logging The debug logging in imspcuirq unconditionally prints data from pcu-urbinbuf. However, if the...

CVE-2026-72079

A flaw was found in the Linux kernel's ims-pcu driver. A malicious device can exploit an issue in the imspcudisconnect function, which incorrectly distinguishes between control and data interfaces. By presenting a data interface with the same class as the control interface, a malicious device can...

CVE-2026-72077

A flaw was found in the Linux kernel's ims-pcu input driver. This vulnerability occurs when the firmware object is not properly released if validation fails during an asynchronous update. This oversight can lead to a firmware leak, potentially exposing sensitive information or system resources. T...

CVE-2026-72076

A flaw was found in the Linux kernel's ims-pcu driver. The debug logging in the imspcuirq function can attempt to read data beyond the allocated buffer when processing certain Universal Serial Bus USB control requests. This out-of-bounds read occurs if the length of the control request exceeds th...

CVE-2026-72075

A flaw was found in the Linux kernel's ims-pcu input driver. A race condition occurs when the imspcuresetdevice function is called without proper synchronization, allowing concurrent operations to corrupt a shared command buffer. This vulnerability could be exploited by a local attacker to cause...

CVE-2026-72074

A flaw was found in the Linux kernel's ims-pcu driver. A type confusion vulnerability exists in the CDC union descriptor parsing, where the driver trusts the bMasterInterface0 value without proper verification. This could allow a local attacker, or a malicious USB device, to overwrite the private...

CVE-2026-72074

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to...

CVE-2026-72075

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix race condition in resetdevice sysfs callback The imspcuresetdevice sysfs callback calls imspcuexecutecommand without acquiring pcu-cmdmutex. This can lead to data races and corruption of the shared command...

CVE-2026-72077

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use freefirmware to ensure the firmware is always released...

CVE-2026-72079

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect imspcudisconnect only intended to perform cleanup when the primary control interface is unbound. However, it currently relies on the interface class to distinguish...