CVE-2026-72076

Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging

The debug logging in ims_pcu_irq() unconditionally prints data from pcu->urb_in_buf. However, if the interrupt fired for pcu->urb_ctrl, the actual data resides in pcu->urb_ctrl_buf. If urb->actual_length for the control URB exceeds pcu->max_in_size, this leads to an out-of-bounds read.

Fix this by printing from the correct buffer associated with the URB.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	628329d52474323938a03826941e166bc7c8eff4 to before 4d2553e9a76a11500ec670cbe16b7fd3da4832deAffected 628329d52474323938a03826941e166bc7c8eff4 to before b746e853721dee91e4234c033d1b90f4605705bbAffected 628329d52474323938a03826941e166bc7c8eff4 to before e6153407d7edabc6ff98f0fda415d556c0bcb57aAffected 628329d52474323938a03826941e166bc7c8eff4 to before 3fd7c0ace245334f2a0bd29fdcb680ad56e9b275Affected 628329d52474323938a03826941e166bc7c8eff4 to before 20fbf3ca0259d00664d1ede88837e1f11b49a88eAffected 628329d52474323938a03826941e166bc7c8eff4 to before 9c964fc9507aeab74376ba9f892cf84ad6950dfeAffected 628329d52474323938a03826941e166bc7c8eff4 to before f97bfc1a0766802a99167b3dc62d1ee7dca929feAffected 628329d52474323938a03826941e166bc7c8eff4 to before 403b0a6970b1084bb27907c0f8225801fdd0fe1dAffected
LinuxLinux	3.10Affected before 3.10Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

628329d52474323938a03826941e166bc7c8eff4 to before 4d2553e9a76a11500ec670cbe16b7fd3da4832deAffected
628329d52474323938a03826941e166bc7c8eff4 to before b746e853721dee91e4234c033d1b90f4605705bbAffected
628329d52474323938a03826941e166bc7c8eff4 to before e6153407d7edabc6ff98f0fda415d556c0bcb57aAffected
628329d52474323938a03826941e166bc7c8eff4 to before 3fd7c0ace245334f2a0bd29fdcb680ad56e9b275Affected
628329d52474323938a03826941e166bc7c8eff4 to before 20fbf3ca0259d00664d1ede88837e1f11b49a88eAffected
628329d52474323938a03826941e166bc7c8eff4 to before 9c964fc9507aeab74376ba9f892cf84ad6950dfeAffected
628329d52474323938a03826941e166bc7c8eff4 to before f97bfc1a0766802a99167b3dc62d1ee7dca929feAffected
628329d52474323938a03826941e166bc7c8eff4 to before 403b0a6970b1084bb27907c0f8225801fdd0fe1dAffected

LinuxLinux

3.10Affected
before 3.10Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.