CVE-2026-72077

Input: ims-pcu - fix firmware leak in async update

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 23, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - fix firmware leak in async update

The firmware object was not being released if validation failed. Use __free(firmware) to ensure the firmware is always released.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 628329d52474323938a03826941e166bc7c8eff4 to before f4b8cd2a96b47473e912e8a134f3c59efb81f10fAffected
  • 628329d52474323938a03826941e166bc7c8eff4 to before 9efba5177a51ed996b0bdc03aa677c08247d5b91Affected
  • 628329d52474323938a03826941e166bc7c8eff4 to before af0641337f6584ccbc7a42ce3f4803d8ff9c5a4aAffected
  • 628329d52474323938a03826941e166bc7c8eff4 to before a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ecAffected
  • 628329d52474323938a03826941e166bc7c8eff4 to before 1f7bdfbe791aacad77db87f044e78ef60a93ae0dAffected
  • 628329d52474323938a03826941e166bc7c8eff4 to before 99c428d7ef644d3e394f3072f905040c16dab18dAffected
  • 628329d52474323938a03826941e166bc7c8eff4 to before 47a9889a9325b87698b6d6eaf3187a9af6e4773dAffected
  • 628329d52474323938a03826941e166bc7c8eff4 to before d48795b5cd6828d36b707e8d62fc9e5c90e004abAffected
LinuxLinux
  • 3.10Affected
  • before 3.10Not affected
  • 5.10.266 through 5.10.*Not affected
  • 5.15.217 through 5.15.*Not affected
  • 6.1.184 through 6.1.*Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.