CVE-2026-72077

Input: ims-pcu - fix firmware leak in async update

N/A

Published: August 15, 2026 at 05:52 AM UTC

Updated: August 23, 2026 at 01:17 PM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use __free(firmware) to ensure the firmware is always released.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.10 ≤ v < 5.10.2663.10 ≤ v < 5.15.2173.10 ≤ v < 6.1.1843.10 ≤ v < 6.12.973.10 ≤ v < 6.18.403.10 ≤ v < 6.6.1483.10 ≤ v < 7.1.53.10 ≤ v < 7.23.10628329d52474323938a03826941e166bc7c8eff4

Vendor states this is fixed in 1f7bdfbe791aacad77db87f044e78ef60a93ae0d (fixed)

Vendor states this is fixed in 47a9889a9325b87698b6d6eaf3187a9af6e4773d (fixed)

Vendor states this is fixed in 99c428d7ef644d3e394f3072f905040c16dab18d (fixed)

Vendor states this is fixed in 9efba5177a51ed996b0bdc03aa677c08247d5b91 (fixed)

Vendor states this is fixed in a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec (fixed)

Vendor states this is fixed in af0641337f6584ccbc7a42ce3f4803d8ff9c5a4a (fixed)

Vendor states this is fixed in d48795b5cd6828d36b707e8d62fc9e5c90e004ab (fixed)

Vendor states this is fixed in f4b8cd2a96b47473e912e8a134f3c59efb81f10f (fixed)

Vendor states this is fixed in 3.10 (unaffected)

Vendor states this is fixed in 5.10.266 (unaffected)

Vendor states this is fixed in 5.15.217 (unaffected)

Vendor states this is fixed in 6.1.184 (unaffected)