CVE-2026-72076

A flaw was found in the Linux kernel's ims-pcu driver. The debug logging in the ims_pcu_irq() function can attempt to read data beyond the allocated buffer when processing certain Universal Serial Bus (USB) control requests. This out-of-bounds read occurs if the length of the control request exceeds the expected maximum input size. A local attacker could potentially use this flaw to cause a denial of service or disclose sensitive information from kernel memory.

This vulnerability is rated as Moderate because exploitation requires local access and the presence of specialized IMS Passenger Control Unit hardware or an emulated USB device. Triggering the flaw is limited to processing malformed control messages during interrupt handling, which restricts the attack vector. In enterprise environments, standard configurations do not typically utilize this specialized input hardware, substantially reducing real-world exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.