-

CVE-2026-72078

Input: ims-pcu - validate control endpoint type

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - validate control endpoint type

The driver currently assumes that the first endpoint of the control
interface is an interrupt IN endpoint without verifying it. A malicious
device could provide a different endpoint type, which would then be
passed to usb_fill_int_urb(), potentially leading to kernel warnings
or undefined behavior.

Verify that the control endpoint is an interrupt IN endpoint.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 628329d52474323938a03826941e166bc7c8eff4
Version < 5de5075a1f26166f172b6687cb66810a9b61e3eb
Status affected
Version 628329d52474323938a03826941e166bc7c8eff4
Version < 7960d99332e03705ec622d92f31e0c77de8baac6
Status affected
Version 628329d52474323938a03826941e166bc7c8eff4
Version < 5b96b4da96313dd799a3a40dcfd598d2e2c19217
Status affected
Version 628329d52474323938a03826941e166bc7c8eff4
Version < aa1885f87e60c80e59e50ffd5fb096bf02c83e05
Status affected
Version 628329d52474323938a03826941e166bc7c8eff4
Version < a630508a09b0c05f14bc0843ed409221a93751aa
Status affected
Version 628329d52474323938a03826941e166bc7c8eff4
Version < c8d3d83f2eaaf7659de76e8d44e8fc88ee346042
Status affected
Version 628329d52474323938a03826941e166bc7c8eff4
Version < cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e
Status affected
Version 628329d52474323938a03826941e166bc7c8eff4
Version < baf56975806534268e24acf9a8abb1c447ce11e9
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.10
Status affected
Version 0
Version < 3.10
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.127
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5de5075a1f26166f172b6687cb66810a9b61e3eb
https://git.kernel.org/stable/c/7960d99332e03705ec622d92f31e0c77de8baac6
https://git.kernel.org/stable/c/5b96b4da96313dd799a3a40dcfd598d2e2c19217
https://git.kernel.org/stable/c/aa1885f87e60c80e59e50ffd5fb096bf02c83e05
https://git.kernel.org/stable/c/a630508a09b0c05f14bc0843ed409221a93751aa
https://git.kernel.org/stable/c/c8d3d83f2eaaf7659de76e8d44e8fc88ee346042
https://git.kernel.org/stable/c/cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e
https://git.kernel.org/stable/c/baf56975806534268e24acf9a8abb1c447ce11e9