Back to CVE records
Not yet scoredPublished Aug 15, 2026
CVE-2026-72077Input: ims-pcu - fix firmware leak in async update
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use __free(firmware) to ensure the firmware is always released.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 23, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 628329d52474323938a03826941e166bc7c8eff4 before f4b8cd2a96b47473e912e8a134f3c59efb81f10f; 628329d52474323938a03826941e166bc7c8eff4 builds before 9efba5177a51ed996b0bdc03aa677c08247d5b91; from 628329d52474323938a03826941e166bc7c8eff4 before af0641337f6584ccbc7a42ce3f4803d8ff9c5a4a; from 628329d52474323938a03826941e166bc7c8eff4 before a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec; 628329d52474323938a03826941e166bc7c8eff4 builds before 1f7bdfbe791aacad77db87f044e78ef60a93ae0d; 628329d52474323938a03826941e166bc7c8eff4 builds before 99c428d7ef644d3e394f3072f905040c16dab18d; 628329d52474323938a03826941e166bc7c8eff4 builds before 47a9889a9325b87698b6d6eaf3187a9af6e4773d; from 628329d52474323938a03826941e166bc7c8eff4 before d48795b5cd6828d36b707e8d62fc9e5c90e004ab | CNA record |
References
- https://git.kernel.org/stable/c/f4b8cd2a96b47473e912e8a134f3c59efb81f10f
- https://git.kernel.org/stable/c/9efba5177a51ed996b0bdc03aa677c08247d5b91
- https://git.kernel.org/stable/c/af0641337f6584ccbc7a42ce3f4803d8ff9c5a4a
- https://git.kernel.org/stable/c/a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec
- https://git.kernel.org/stable/c/1f7bdfbe791aacad77db87f044e78ef60a93ae0d
- https://git.kernel.org/stable/c/99c428d7ef644d3e394f3072f905040c16dab18d
- https://git.kernel.org/stable/c/47a9889a9325b87698b6d6eaf3187a9af6e4773d
- https://git.kernel.org/stable/c/d48795b5cd6828d36b707e8d62fc9e5c90e004ab
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.