CVE-2026-72077
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use __free(firmware) to ensure the firmware is always released.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72077
EUVD
EUVD-2026-59035

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ims-pcu firmware *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a firmware leak in the ims-pcu driver during an asynchronous update. When validation fails, the firmware object is not released, potentially causing resource leaks.

Detection Guidance

This vulnerability is specific to the Linux kernel's ims-pcu driver and involves a firmware leak during async updates. Detection requires checking kernel logs for firmware-related errors or leaks after update attempts. Commands like dmesg | grep firmware or journalctl -k | grep firmware may help identify issues.

Impact Analysis

The impact may include system instability or resource exhaustion due to un-released firmware objects. This could lead to performance degradation or crashes in systems using the affected driver.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this issue. Monitor kernel logs for firmware-related errors post-update. If using ims-pcu devices, ensure firmware updates are handled properly to avoid leaks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72077. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart