CVE-2026-72076

Received Received - Intake

Buffer Overflow in Linux Kernel ims-pcu Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging The debug logging in ims_pcu_irq() unconditionally prints data from pcu->urb_in_buf. However, if the interrupt fired for pcu->urb_ctrl, the actual data resides in pcu->urb_ctrl_buf. If urb->actual_length for the control URB exceeds pcu->max_in_size, this leads to an out-of-bounds read. Fix this by printing from the correct buffer associated with the URB.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72076

EUVD

EUVD-2026-59034

Affected Vendors & Products

Vendor	Product	Version / Range
ims-pcu	ims-pcu	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds read in the Linux kernel's ims-pcu driver. The issue occurs in the debug logging function ims_pcu_irq() which incorrectly reads data from pcu->urb_in_buf even when the interrupt is for pcu->urb_ctrl. If the control URB's actual length exceeds the buffer size, it causes an out-of-bounds memory read.

Detection Guidance

This vulnerability is specific to the Linux kernel's ims-pcu driver and involves an out-of-bounds read during debug logging. Detection requires checking the kernel version and the ims-pcu driver implementation for the affected code path. No direct network detection commands are applicable. Review kernel logs for ims-pcu related errors or crashes.

Impact Analysis

This vulnerability could allow an attacker to read sensitive kernel memory, potentially leading to information disclosure or privilege escalation. It may cause system instability or crashes if exploited.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA. It is a low-level kernel bug causing an out-of-bounds read in debug logging, which does not involve data exposure or processing of sensitive information.

Mitigation Strategies

Apply the kernel patch that fixes the out-of-bounds read in ims_pcu_irq(). Update to a kernel version containing the fix. If using a custom kernel, ensure the ims-pcu driver is updated to the corrected version. Monitor kernel logs for ims-pcu related issues as a sign of exploitation.

Hi! I’m here to help you understand CVE-2026-72076. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70