Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead to the driver overwriting the private data of another interface. Validate that the control interface found in the descriptor is indeed the one we are probing.
References
- https://git.kernel.org/stable/c/08bf4b6ee28987570f4b3f1954427621fa291bf5
- https://git.kernel.org/stable/c/0e8115a7ed9a99ff9495615a575a6c0f43566d10
- https://git.kernel.org/stable/c/163c3e7a1de6b3d5c85edb3bdf4cf087382103b0
- https://git.kernel.org/stable/c/ab87cd7789d00f441f60a016cbcff35abe76513c
- https://git.kernel.org/stable/c/b5518c5632f3485849421b9c33b4db5ae6a54ed7
- https://git.kernel.org/stable/c/ca459e237bc49567649c56bc72e4c602fb92fd67
- https://git.kernel.org/stable/c/f4cf878dcc4f6f02e7a25294bfaed4361264995e
- https://git.kernel.org/stable/c/fa7f65c5315a25b310daae69ab527efd420e37fa
FAQ
What is CVE-2026-72074?
CVE-2026-72074 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix type confusion in CDC union descriptor parsing The driver currently trusts the bMasterInterface0 from the CDC...
How severe is CVE-2026-72074?
CVSS scoring is not yet available for CVE-2026-72074. Check NVD for updates.
Is there a patch for CVE-2026-72074?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.