0.0
NA
CVE-2026-72074
Input: ims-pcu - fix type confusion in CDC union descriptor parsing
Overview
Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to the driver overwriting the private data of another interface. Validate that the control interface found in the descriptor is indeed the one we are probing.
Details
INFO
Published Date :
Aug. 15, 2026, 6:21 a.m.
Last Modified :
Aug. 17, 2026, 6:18 a.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
Validate control interface in CDC union descriptor parsing to prevent data overwrites.
- Verify bMasterInterface0 matches the probed interface.
- Ensure proper validation of CDC union descriptor parsing.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-72074.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-72074 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-72074
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-72074 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-72074 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 17, 2026
Action Type Old Value New Value Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'ab87cd7789d00f441f60a016cbcff35abe76513c', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'b5518c5632f3485849421b9c33b4db5ae6a54ed7', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': '163c3e7a1de6b3d5c85edb3bdf4cf087382103b0', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': '08bf4b6ee28987570f4b3f1954427621fa291bf5', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'fa7f65c5315a25b310daae69ab527efd420e37fa', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': '0e8115a7ed9a99ff9495615a575a6c0f43566d10', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'f4cf878dcc4f6f02e7a25294bfaed4361264995e', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'ca459e237bc49567649c56bc72e4c602fb92fd67', 'versionType': 'git'}], 'programFiles': ['drivers/input/misc/ims-pcu.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '3.10'}, {'status': 'unaffected', 'version': '0', 'lessThan': '3.10', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.261', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/input/misc/ims-pcu.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'ab87cd7789d00f441f60a016cbcff35abe76513c', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'b5518c5632f3485849421b9c33b4db5ae6a54ed7', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': '163c3e7a1de6b3d5c85edb3bdf4cf087382103b0', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': '08bf4b6ee28987570f4b3f1954427621fa291bf5', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'fa7f65c5315a25b310daae69ab527efd420e37fa', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': '0e8115a7ed9a99ff9495615a575a6c0f43566d10', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'f4cf878dcc4f6f02e7a25294bfaed4361264995e', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'ca459e237bc49567649c56bc72e4c602fb92fd67', 'versionType': 'git'}], 'programFiles': ['drivers/input/misc/ims-pcu.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '3.10'}, {'status': 'unaffected', 'version': '0', 'lessThan': '3.10', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.261', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/input/misc/ims-pcu.c'], 'defaultStatus': 'affected'}] -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 15, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'ab87cd7789d00f441f60a016cbcff35abe76513c', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'b5518c5632f3485849421b9c33b4db5ae6a54ed7', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': '163c3e7a1de6b3d5c85edb3bdf4cf087382103b0', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': '08bf4b6ee28987570f4b3f1954427621fa291bf5', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'fa7f65c5315a25b310daae69ab527efd420e37fa', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': '0e8115a7ed9a99ff9495615a575a6c0f43566d10', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'f4cf878dcc4f6f02e7a25294bfaed4361264995e', 'versionType': 'git'}, {'status': 'affected', 'version': '628329d52474323938a03826941e166bc7c8eff4', 'lessThan': 'ca459e237bc49567649c56bc72e4c602fb92fd67', 'versionType': 'git'}], 'programFiles': ['drivers/input/misc/ims-pcu.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '3.10'}, {'status': 'unaffected', 'version': '0', 'lessThan': '3.10', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.261', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/input/misc/ims-pcu.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to the driver overwriting the private data of another interface. Validate that the control interface found in the descriptor is indeed the one we are probing. Added Reference https://git.kernel.org/stable/c/08bf4b6ee28987570f4b3f1954427621fa291bf5 Added Reference https://git.kernel.org/stable/c/0e8115a7ed9a99ff9495615a575a6c0f43566d10 Added Reference https://git.kernel.org/stable/c/163c3e7a1de6b3d5c85edb3bdf4cf087382103b0 Added Reference https://git.kernel.org/stable/c/ab87cd7789d00f441f60a016cbcff35abe76513c Added Reference https://git.kernel.org/stable/c/b5518c5632f3485849421b9c33b4db5ae6a54ed7 Added Reference https://git.kernel.org/stable/c/ca459e237bc49567649c56bc72e4c602fb92fd67 Added Reference https://git.kernel.org/stable/c/f4cf878dcc4f6f02e7a25294bfaed4361264995e Added Reference https://git.kernel.org/stable/c/fa7f65c5315a25b310daae69ab527efd420e37fa
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.