CVE-2026-72075Input: ims-pcu - fix race condition in reset_device sysfs callback
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix race condition in reset_device sysfs callback The ims_pcu_reset_device() sysfs callback calls ims_pcu_execute_command() without acquiring pcu->cmd_mutex. This can lead to data races and corruption of the shared command buffer if triggered concurrently with other commands. Acquire pcu->cmd_mutex before calling ims_pcu_execute_command().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 27, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 628329d52474323938a03826941e166bc7c8eff4 builds before 0fb84b1a3cdc74c453abc5f961c7d318c267ea4c; 628329d52474323938a03826941e166bc7c8eff4 builds before 129187ec3f868829f61f6f07381ca72fe642d0b7; 628329d52474323938a03826941e166bc7c8eff4 builds before 54c2237fc69541c75fe4cd321622ebb8ecc3587f; from 628329d52474323938a03826941e166bc7c8eff4 before f516cba88bf952d847e5c96d0e87f17eaae7ee6f; from 628329d52474323938a03826941e166bc7c8eff4 before 025955847e1500ced4719ac178beff6a3b2f0e3c; 628329d52474323938a03826941e166bc7c8eff4 builds before 411b8c4b274737c3bf08e1e025801161603cfffc | CNA record |
References
- https://git.kernel.org/stable/c/0fb84b1a3cdc74c453abc5f961c7d318c267ea4c
- https://git.kernel.org/stable/c/129187ec3f868829f61f6f07381ca72fe642d0b7
- https://git.kernel.org/stable/c/54c2237fc69541c75fe4cd321622ebb8ecc3587f
- https://git.kernel.org/stable/c/f516cba88bf952d847e5c96d0e87f17eaae7ee6f
- https://git.kernel.org/stable/c/025955847e1500ced4719ac178beff6a3b2f0e3c
- https://git.kernel.org/stable/c/411b8c4b274737c3bf08e1e025801161603cfffc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.