CVE-2026-72078 - Vulnerability Details

- Input: ims-pcu - validate control endpoint type

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - validate control endpoint type

The driver currently assumes that the first endpoint of the control
interface is an interrupt IN endpoint without verifying it. A malicious
device could provide a different endpoint type, which would then be
passed to usb_fill_int_urb(), potentially leading to kernel warnings
or undefined behavior.

Verify that the control endpoint is an interrupt IN endpoint.

Published: 2026-08-15

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`628329d52474323938a03826941e166bc7c8eff4`	affected	< 5de5075a1f26166f172b6687cb66810a9b61e3eb
`628329d52474323938a03826941e166bc7c8eff4`	affected	< 7960d99332e03705ec622d92f31e0c77de8baac6
`628329d52474323938a03826941e166bc7c8eff4`	affected	< 5b96b4da96313dd799a3a40dcfd598d2e2c19217
`628329d52474323938a03826941e166bc7c8eff4`	affected	< aa1885f87e60c80e59e50ffd5fb096bf02c83e05
`628329d52474323938a03826941e166bc7c8eff4`	affected	< a630508a09b0c05f14bc0843ed409221a93751aa
`628329d52474323938a03826941e166bc7c8eff4`	affected	< c8d3d83f2eaaf7659de76e8d44e8fc88ee346042
`628329d52474323938a03826941e166bc7c8eff4`	affected	< cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e
`628329d52474323938a03826941e166bc7c8eff4`	affected	< baf56975806534268e24acf9a8abb1c447ce11e9

Linux

affected

Version	Status	Constraints
`3.10`	affected	—
`0`	unaffected	< 3.10
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2-rc1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[628329d52474323938a03826941e166bc7c8eff4,5de5075a1f26166f172b6687cb66810a9b61e3eb)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,7960d99332e03705ec622d92f31e0c77de8baac6)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,5b96b4da96313dd799a3a40dcfd598d2e2c19217)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,a630508a09b0c05f14bc0843ed409221a93751aa)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,aa1885f87e60c80e59e50ffd5fb096bf02c83e05)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,baf56975806534268e24acf9a8abb1c447ce11e9)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,c8d3d83f2eaaf7659de76e8d44e8fc88ee346042)`	affected	code_commit	—
`[628329d52474323938a03826941e166bc7c8eff4,cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`3.10`	affected	generic	—
`[0,3.10)`	unaffected	generic	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc1,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0022.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/5b96b4da96313dd799a3a40dcfd598d2e2c19217
https://git.kernel.org/stable/c/5de5075a1f26166f172b6687cb66810a9b61e3eb
https://git.kernel.org/stable/c/7960d99332e03705ec622d92f31e0c77de8baac6
https://git.kernel.org/stable/c/a630508a09b0c05f14bc0843ed409221a93751aa
https://git.kernel.org/stable/c/aa1885f87e60c80e59e50ffd5fb096bf02c83e05
https://git.kernel.org/stable/c/baf56975806534268e24acf9a8abb1c447ce11e9
https://git.kernel.org/stable/c/c8d3d83f2eaaf7659de76e8d44e8fc88ee346042
https://git.kernel.org/stable/c/cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e

History

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint without verifying it. A malicious device could provide a different endpoint type, which would then be passed to usb_fill_int_urb(), potentially leading to kernel warnings or undefined behavior. Verify that the control endpoint is an interrupt IN endpoint.
Title		Input: ims-pcu - validate control endpoint type
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/5b96b4da96313dd799a3a40dcfd598d2e2c19217 https://git.kernel.org/stable/c/5de5075a1f26166f172b6687cb66810a9b61e3eb https://git.kernel.org/stable/c/7960d99332e03705ec622d92f31e0c77de8baac6 https://git.kernel.org/stable/c/a630508a09b0c05f14bc0843ed409221a93751aa https://git.kernel.org/stable/c/aa1885f87e60c80e59e50ffd5fb096bf02c83e05 https://git.kernel.org/stable/c/baf56975806534268e24acf9a8abb1c447ce11e9 https://git.kernel.org/stable/c/c8d3d83f2eaaf7659de76e8d44e8fc88ee346042 https://git.kernel.org/stable/c/cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:52:28.353Z

Updated: 2026-08-15T05:52:28.353Z

Reserved: 2026-08-09T03:40:39.904Z

Link: CVE-2026-72078

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:17.763

Modified: 2026-08-15T06:21:17.763

Link: CVE-2026-72078

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-15T11:30:06Z

Weaknesses

No weakness.

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object