CVE-2026-72079
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect ims_pcu_disconnect() only intended to perform cleanup when the primary (control) interface is unbound. However, it currently relies on the interface class to distinguish between control and data interfaces. A malicious device could present a data interface with the same class as the control interface, leading to premature cleanup and potential use-after-free or double-free. Switch to verifying that the interface being disconnected is indeed the control interface.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72079
EUVD
EUVD-2026-59037

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ims_pcu ims_pcu to 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a use-after-free and double-free issue in the Linux kernel's ims-pcu driver. It occurs when disconnecting a malicious device that mimics the control interface's class. The function ims_pcu_disconnect() incorrectly cleans up resources when a data interface with the same class is disconnected, leading to potential memory corruption or crashes.

Detection Guidance

This vulnerability involves a use-after-free or double-free condition in the Linux kernel's ims-pcu driver during device disconnection. Detection requires checking for kernel logs or crashes related to ims-pcu or USB device handling. Monitor system logs for errors like 'use-after-free' or 'double-free' in the kernel logs. Commands like 'dmesg | grep -i ims_pcu' or 'journalctl -k | grep -i ims_pcu' may help identify issues. Ensure the kernel version is updated to a patched release.

Impact Analysis

If exploited, this flaw could allow an attacker to crash the system, execute arbitrary code, or escalate privileges. Users with affected devices connected may experience system instability or security breaches.

Mitigation Strategies

Apply the latest kernel updates from your Linux distribution to ensure the patched ims-pcu driver is installed. Avoid connecting untrusted USB devices that may trigger the vulnerability. If the driver is not in use, consider blacklisting the ims-pcu module via 'echo blacklist ims_pcu >> /etc/modprobe.d/blacklist.conf' and rebooting. Monitor vendor advisories for further guidance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72079. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart