U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-72078 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently assumes that the first endpoint of the control interface is an interrupt IN endpoint without verifying it. A malicious device could provide a different endpoint type, which would then be passed to usb_fill_int_urb(), potentially leading to kernel warnings or undefined behavior. Verify that the control endpoint is an interrupt IN endpoint.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/5b96b4da96313dd799a3a40dcfd598d2e2c19217 kernel.org
https://git.kernel.org/stable/c/5de5075a1f26166f172b6687cb66810a9b61e3eb kernel.org
https://git.kernel.org/stable/c/7960d99332e03705ec622d92f31e0c77de8baac6 kernel.org
https://git.kernel.org/stable/c/a630508a09b0c05f14bc0843ed409221a93751aa kernel.org
https://git.kernel.org/stable/c/aa1885f87e60c80e59e50ffd5fb096bf02c83e05 kernel.org
https://git.kernel.org/stable/c/baf56975806534268e24acf9a8abb1c447ce11e9 kernel.org
https://git.kernel.org/stable/c/c8d3d83f2eaaf7659de76e8d44e8fc88ee346042 kernel.org
https://git.kernel.org/stable/c/cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

1 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-72078
NVD Published Date:
08/15/2026
NVD Last Modified:
08/15/2026
Source:
kernel.org