CVE-2026-72079

A flaw was found in the Linux kernel's ims-pcu driver. A malicious device can exploit an issue in the ims_pcu_disconnect() function, which incorrectly distinguishes between control and data interfaces. By presenting a data interface with the same class as the control interface, a malicious device can trigger premature cleanup. This can lead to use-after-free or double-free vulnerabilities, potentially allowing an attacker to execute arbitrary code or cause a denial of service.

This vulnerability is rated as having Moderate impact because exploitation requires physical access to connect a malicious USB device or the capability to emulate USB peripherals in a virtualized environment. Standard Red Hat Enterprise Linux kernels do not enable the IMS Passenger Control Unit (ims-pcu) driver by default, leaving default deployments unexposed. Risk is limited to local denial of service or potential kernel memory corruption when disconnecting the peripheral, with no mechanism for remote exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.