CVE-2026-72076
Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging The debug logging in ims_pcu_irq() unconditionally prints data from pcu->urb_in_buf. However, if the interrupt fired for pcu->urb_ctrl, the actual data resides in pcu->urb_ctrl_buf. If urb->actual_length for the control URB exceeds pcu->max_in_size, this leads to an out-of-bounds read. Fix this by printing from the correct buffer associated with the URB.
How to fix
- Linux Linux4d2553e9a76a11500ec670cbe16b7fd3da4832de, b746e853721dee91e4234c033d1b90f4605705bb, e6153407d7edabc6ff98f0fda415d556c0bcb57a, 3fd7c0ace245334f2a0bd29fdcb680ad56e9b275, 20fbf3ca0259d00664d1ede88837e1f11b49a88e, 9c964fc9507aeab74376ba9f892cf84ad6950dfe, f97bfc1a0766802a99167b3dc62d1ee7dca929fe, 403b0a6970b1084bb27907c0f8225801fdd0fe1d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 4d2553e9a76a11500ec670cbe16b7fd3da4832de, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < b746e853721dee91e4234c033d1b90f4605705bb, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < e6153407d7edabc6ff98f0fda415d556c0bcb57a, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 3fd7c0ace245334f2a0bd29fdcb680ad56e9b275, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 20fbf3ca0259d00664d1ede88837e1f11b49a88e, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 9c964fc9507aeab74376ba9f892cf84ad6950dfe, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < f97bfc1a0766802a99167b3dc62d1ee7dca929fe, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 403b0a6970b1084bb27907c0f8225801fdd0fe1d, 3.10 | 4d2553e9a76a11500ec670cbe16b7fd3da4832de, b746e853721dee91e4234c033d1b90f4605705bb, e6153407d7edabc6ff98f0fda415d556c0bcb57a, 3fd7c0ace245334f2a0bd29fdcb680ad56e9b275, 20fbf3ca0259d00664d1ede88837e1f11b49a88e, 9c964fc9507aeab74376ba9f892cf84ad6950dfe, f97bfc1a0766802a99167b3dc62d1ee7dca929fe, 403b0a6970b1084bb27907c0f8225801fdd0fe1d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.