CVE-2026-72077 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use __free(firmware) to ensure the firmware is always released.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Kernel

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/1f7bdfbe791aacad77db87f044e78ef60a93ae0d
https://git.kernel.org/stable/c/47a9889a9325b87698b6d6eaf3187a9af6e4773d
https://git.kernel.org/stable/c/99c428d7ef644d3e394f3072f905040c16dab18d
https://git.kernel.org/stable/c/a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec
https://git.kernel.org/stable/c/d48795b5cd6828d36b707e8d62fc9e5c90e004ab

History

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use __free(firmware) to ensure the firmware is always released.
Title		Input: ims-pcu - fix firmware leak in async update
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1f7bdfbe791aacad77db87f044e78ef60a93ae0d https://git.kernel.org/stable/c/47a9889a9325b87698b6d6eaf3187a9af6e4773d https://git.kernel.org/stable/c/99c428d7ef644d3e394f3072f905040c16dab18d https://git.kernel.org/stable/c/a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec https://git.kernel.org/stable/c/d48795b5cd6828d36b707e8d62fc9e5c90e004ab

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:52:27.612Z

Updated: 2026-08-15T05:52:27.612Z

Reserved: 2026-08-09T03:40:39.904Z

Link: CVE-2026-72077

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:17.660

Modified: 2026-08-15T06:21:17.660

Link: CVE-2026-72077

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72077", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.904Z", "datePublished": "2026-08-15T05:52:27.612Z", "dateUpdated": "2026-08-15T05:52:27.612Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T05:52:27.612Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: ims-pcu - fix firmware leak in async update\n\nThe firmware object was not being released if validation failed.\nUse __free(firmware) to ensure the firmware is always released."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/input/misc/ims-pcu.c"], "versions": [{"version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec", "status": "affected", "versionType": "git"}, {"version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "1f7bdfbe791aacad77db87f044e78ef60a93ae0d", "status": "affected", "versionType": "git"}, {"version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "99c428d7ef644d3e394f3072f905040c16dab18d", "status": "affected", "versionType": "git"}, {"version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "47a9889a9325b87698b6d6eaf3187a9af6e4773d", "status": "affected", "versionType": "git"}, {"version": "628329d52474323938a03826941e166bc7c8eff4", "lessThan": "d48795b5cd6828d36b707e8d62fc9e5c90e004ab", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/input/misc/ims-pcu.c"], "versions": [{"version": "3.10", "status": "affected"}, {"version": "0", "lessThan": "3.10", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.148", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "6.6.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.10", "versionEndExcluding": "7.2-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec"}, {"url": "https://git.kernel.org/stable/c/1f7bdfbe791aacad77db87f044e78ef60a93ae0d"}, {"url": "https://git.kernel.org/stable/c/99c428d7ef644d3e394f3072f905040c16dab18d"}, {"url": "https://git.kernel.org/stable/c/47a9889a9325b87698b6d6eaf3187a9af6e4773d"}, {"url": "https://git.kernel.org/stable/c/d48795b5cd6828d36b707e8d62fc9e5c90e004ab"}], "title": "Input: ims-pcu - fix firmware leak in async update", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/input/misc/ims-pcu.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec", "status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "versionType": "git"}, {"lessThan": "1f7bdfbe791aacad77db87f044e78ef60a93ae0d", "status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "versionType": "git"}, {"lessThan": "99c428d7ef644d3e394f3072f905040c16dab18d", "status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "versionType": "git"}, {"lessThan": "47a9889a9325b87698b6d6eaf3187a9af6e4773d", "status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "versionType": "git"}, {"lessThan": "d48795b5cd6828d36b707e8d62fc9e5c90e004ab", "status": "affected", "version": "628329d52474323938a03826941e166bc7c8eff4", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/input/misc/ims-pcu.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.10"}, {"lessThan": "3.10", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.148", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: ims-pcu - fix firmware leak in async update\n\nThe firmware object was not being released if validation failed.\nUse __free(firmware) to ensure the firmware is always released."}], "id": "CVE-2026-72077", "lastModified": "2026-08-15T06:21:17.660", "metrics": {}, "published": "2026-08-15T06:21:17.660", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1f7bdfbe791aacad77db87f044e78ef60a93ae0d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/47a9889a9325b87698b6d6eaf3187a9af6e4773d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/99c428d7ef644d3e394f3072f905040c16dab18d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d48795b5cd6828d36b707e8d62fc9e5c90e004ab"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}