CVE-2026-72076

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging The debug logging in ims_pcu_irq() unconditionally prints data from pcu->urb_in_buf. However, if the interrupt fired for pcu->urb_ctrl, the actual data resides in pcu->urb_ctrl_buf. If urb->actual_length for the control URB exceeds pcu->max_in_size, this leads to an out-of-bounds read. Fix this by printing from the correct buffer associated with the URB.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux4d2553e9a76a11500ec670cbe16b7fd3da4832de, b746e853721dee91e4234c033d1b90f4605705bb, e6153407d7edabc6ff98f0fda415d556c0bcb57a, 3fd7c0ace245334f2a0bd29fdcb680ad56e9b275, 20fbf3ca0259d00664d1ede88837e1f11b49a88e, 9c964fc9507aeab74376ba9f892cf84ad6950dfe, f97bfc1a0766802a99167b3dc62d1ee7dca929fe, 403b0a6970b1084bb27907c0f8225801fdd0fe1d or later

Affected products

ProductAffected versionsFixed in
Linux Linux628329d52474323938a03826941e166bc7c8eff4 ≤ v < 4d2553e9a76a11500ec670cbe16b7fd3da4832de, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < b746e853721dee91e4234c033d1b90f4605705bb, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < e6153407d7edabc6ff98f0fda415d556c0bcb57a, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 3fd7c0ace245334f2a0bd29fdcb680ad56e9b275, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 20fbf3ca0259d00664d1ede88837e1f11b49a88e, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 9c964fc9507aeab74376ba9f892cf84ad6950dfe, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < f97bfc1a0766802a99167b3dc62d1ee7dca929fe, 628329d52474323938a03826941e166bc7c8eff4 ≤ v < 403b0a6970b1084bb27907c0f8225801fdd0fe1d, 3.104d2553e9a76a11500ec670cbe16b7fd3da4832de, b746e853721dee91e4234c033d1b90f4605705bb, e6153407d7edabc6ff98f0fda415d556c0bcb57a, 3fd7c0ace245334f2a0bd29fdcb680ad56e9b275, 20fbf3ca0259d00664d1ede88837e1f11b49a88e, 9c964fc9507aeab74376ba9f892cf84ad6950dfe, f97bfc1a0766802a99167b3dc62d1ee7dca929fe, 403b0a6970b1084bb27907c0f8225801fdd0fe1d

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-72076 · Linux · Dark Radar