{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-72074","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","state":"PUBLISHED","assignerShortName":"Linux","dateReserved":"2026-08-09T03:40:39.904Z","datePublished":"2026-08-15T05:52:25.418Z","dateUpdated":"2026-08-17T05:07:42.538Z"},"containers":{"cna":{"providerMetadata":{"orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux","dateUpdated":"2026-08-17T05:07:42.538Z"},"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nInput: ims-pcu - fix type confusion in CDC union descriptor parsing\n\nThe driver currently trusts the bMasterInterface0 from the CDC union\ndescriptor without verifying that it matches the interface being\nprobed. This could lead to the driver overwriting the private data of\nanother interface.\n\nValidate that the control interface found in the descriptor is indeed\nthe one we are probing."}],"affected":[{"product":"Linux","vendor":"Linux","defaultStatus":"unaffected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/input/misc/ims-pcu.c"],"versions":[{"version":"628329d52474323938a03826941e166bc7c8eff4","lessThan":"ab87cd7789d00f441f60a016cbcff35abe76513c","status":"affected","versionType":"git"},{"version":"628329d52474323938a03826941e166bc7c8eff4","lessThan":"b5518c5632f3485849421b9c33b4db5ae6a54ed7","status":"affected","versionType":"git"},{"version":"628329d52474323938a03826941e166bc7c8eff4","lessThan":"163c3e7a1de6b3d5c85edb3bdf4cf087382103b0","status":"affected","versionType":"git"},{"version":"628329d52474323938a03826941e166bc7c8eff4","lessThan":"08bf4b6ee28987570f4b3f1954427621fa291bf5","status":"affected","versionType":"git"},{"version":"628329d52474323938a03826941e166bc7c8eff4","lessThan":"fa7f65c5315a25b310daae69ab527efd420e37fa","status":"affected","versionType":"git"},{"version":"628329d52474323938a03826941e166bc7c8eff4","lessThan":"0e8115a7ed9a99ff9495615a575a6c0f43566d10","status":"affected","versionType":"git"},{"version":"628329d52474323938a03826941e166bc7c8eff4","lessThan":"f4cf878dcc4f6f02e7a25294bfaed4361264995e","status":"affected","versionType":"git"},{"version":"628329d52474323938a03826941e166bc7c8eff4","lessThan":"ca459e237bc49567649c56bc72e4c602fb92fd67","status":"affected","versionType":"git"}]},{"product":"Linux","vendor":"Linux","defaultStatus":"affected","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/input/misc/ims-pcu.c"],"versions":[{"version":"3.10","status":"affected"},{"version":"0","lessThan":"3.10","status":"unaffected","versionType":"semver"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.97","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.40","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","status":"unaffected","versionType":"semver"},{"version":"7.2","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"5.10.261"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"5.15.212"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"6.1.178"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"6.6.145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"6.12.97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"6.18.40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"7.1.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.10","versionEndExcluding":"7.2"}]}]}],"references":[{"url":"https://git.kernel.org/stable/c/ab87cd7789d00f441f60a016cbcff35abe76513c"},{"url":"https://git.kernel.org/stable/c/b5518c5632f3485849421b9c33b4db5ae6a54ed7"},{"url":"https://git.kernel.org/stable/c/163c3e7a1de6b3d5c85edb3bdf4cf087382103b0"},{"url":"https://git.kernel.org/stable/c/08bf4b6ee28987570f4b3f1954427621fa291bf5"},{"url":"https://git.kernel.org/stable/c/fa7f65c5315a25b310daae69ab527efd420e37fa"},{"url":"https://git.kernel.org/stable/c/0e8115a7ed9a99ff9495615a575a6c0f43566d10"},{"url":"https://git.kernel.org/stable/c/f4cf878dcc4f6f02e7a25294bfaed4361264995e"},{"url":"https://git.kernel.org/stable/c/ca459e237bc49567649c56bc72e4c602fb92fd67"}],"title":"Input: ims-pcu - fix type confusion in CDC union descriptor parsing","x_generator":{"engine":"bippy-1.2.0"}}}}