CVE-2026-72074

CVE-2026-72074

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - fix type confusion in CDC union descriptor parsing

The driver currently trusts the bMasterInterface0 from the CDC union

descriptor without verifying that it matches the interface being

probed. This could lead to the driver overwriting the private data of

another interface.

Validate that the control interface found in the descriptor is indeed

the one we are probing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.8th percentile
Published
2026-08-15T10:21Z
References (8)
https://git.kernel.org/stable/c/08bf4b6ee28987570f4b3f1954427621fa291bf5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0e8115a7ed9a99ff9495615a575a6c0f43566d10 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/163c3e7a1de6b3d5c85edb3bdf4cf087382103b0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ab87cd7789d00f441f60a016cbcff35abe76513c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b5518c5632f3485849421b9c33b4db5ae6a54ed7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ca459e237bc49567649c56bc72e4c602fb92fd67 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f4cf878dcc4f6f02e7a25294bfaed4361264995e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fa7f65c5315a25b310daae69ab527efd420e37fa · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:52Z
    Input: ims-pcu - fix type confusion in CDC union descriptor parsing
    cvelistv5