CVE-2026-72075

A flaw was found in the Linux kernel's ims-pcu input driver. A race condition occurs when the ims_pcu_reset_device() function is called without proper synchronization, allowing concurrent operations to corrupt a shared command buffer. This vulnerability could be exploited by a local attacker to cause system instability or a denial of service.

Red Hat rates this vulnerability as Moderate because exploitation is restricted to a local denial of service with no impact on confidentiality or integrity. Supported Red Hat Enterprise Linux kernels do not enable the ims-pcu driver, leaving default deployments unaffected. Furthermore, triggering the issue requires local access to an attached or emulated IMS Passenger Control Unit device to invoke the reset sysfs attribute.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.