CVE-2026-72076

CVE-2026-72076

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging

The debug logging in ims_pcu_irq() unconditionally prints data from

pcu->urb_in_buf. However, if the interrupt fired for pcu->urb_ctrl, the

actual data resides in pcu->urb_ctrl_buf. If urb->actual_length for the

control URB exceeds pcu->max_in_size, this leads to an out-of-bounds

read.

Fix this by printing from the correct buffer associated with the URB.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.8th percentile
Published
2026-08-15T10:21Z
References (8)
EPSS history
Timeline
  • 15 AUG 05:52Z
    Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
    cvelistv5