CVE-2026-72075

Not scored yetLast modified Aug 27, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - fix race condition in reset_device sysfs callback

The ims_pcu_reset_device() sysfs callback calls ims_pcu_execute_command() without acquiring pcu->cmd_mutex. This can lead to data races and corruption of the shared command buffer if triggered concurrently with other commands.

Acquire pcu->cmd_mutex before calling ims_pcu_execute_command().

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 628329d52474323938a03826941e166bc7c8eff4, < 0fb84b1a3cdc74c453abc5f961c7d318c267ea4c; >= 628329d52474323938a03826941e166bc7c8eff4, < 129187ec3f868829f61f6f07381ca72fe642d0b7; >= 628329d52474323938a03826941e166bc7c8eff4, < 54c2237fc69541c75fe4cd321622ebb8ecc3587f; >= 628329d52474323938a03826941e166bc7c8eff4, < f516cba88bf952d847e5c96d0e87f17eaae7ee6f; >= 628329d52474323938a03826941e166bc7c8eff4, < 025955847e1500ced4719ac178beff6a3b2f0e3c; >= 628329d52474323938a03826941e166bc7c8eff4, < 411b8c4b274737c3bf08e1e025801161603cfffc
LinuxLinux3.10

References

Timeline

Published
Aug 15, 2026
Last modified
Aug 27, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-72076In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging CVE-2026-72077In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware objectCVE-2026-72078In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently aCVE-2026-72079In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect ims_CVE-2026-72085.3Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackersCVE-2026-720807.8In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix use-after-free during unmount During unmount or failurCVE-2026-72081In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efct_dispaCVE-2026-72082In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() When efct_hw_CVE-2026-720839.8In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE CVE-2026-720849.8In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the received buffer CVE-2026-720859.3In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command instead of double-puttingCVE-2026-72086In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free the command tag on the TMR submit-failure pat
CVE-2026-72075: Unscored | Vulnix