Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-72074

Input: ims-pcu - fix type confusion in CDC union descriptor parsing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to the driver overwriting the private data of another interface. Validate that the control interface found in the descriptor is indeed the one we are probing.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 628329d52474323938a03826941e166bc7c8eff4 to < ab87cd7789d00f441f60a016cbcff35abe76513caffected
  • 628329d52474323938a03826941e166bc7c8eff4 to < b5518c5632f3485849421b9c33b4db5ae6a54ed7affected
  • 628329d52474323938a03826941e166bc7c8eff4 to < 163c3e7a1de6b3d5c85edb3bdf4cf087382103b0affected
  • 628329d52474323938a03826941e166bc7c8eff4 to < 08bf4b6ee28987570f4b3f1954427621fa291bf5affected
  • 628329d52474323938a03826941e166bc7c8eff4 to < fa7f65c5315a25b310daae69ab527efd420e37faaffected
  • 628329d52474323938a03826941e166bc7c8eff4 to < 0e8115a7ed9a99ff9495615a575a6c0f43566d10affected
  • 628329d52474323938a03826941e166bc7c8eff4 to < f4cf878dcc4f6f02e7a25294bfaed4361264995eaffected
  • 628329d52474323938a03826941e166bc7c8eff4 to < ca459e237bc49567649c56bc72e4c602fb92fd67affected

Linux Linux

Default version status: affected

  • 3.10affected
  • 0 to < 3.10unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References