CVE-2026-72077

Not scored yetLast modified Aug 23, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - fix firmware leak in async update

The firmware object was not being released if validation failed. Use __free(firmware) to ensure the firmware is always released.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 628329d52474323938a03826941e166bc7c8eff4, < f4b8cd2a96b47473e912e8a134f3c59efb81f10f; >= 628329d52474323938a03826941e166bc7c8eff4, < 9efba5177a51ed996b0bdc03aa677c08247d5b91; >= 628329d52474323938a03826941e166bc7c8eff4, < af0641337f6584ccbc7a42ce3f4803d8ff9c5a4a; >= 628329d52474323938a03826941e166bc7c8eff4, < a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ec; >= 628329d52474323938a03826941e166bc7c8eff4, < 1f7bdfbe791aacad77db87f044e78ef60a93ae0d; >= 628329d52474323938a03826941e166bc7c8eff4, < 99c428d7ef644d3e394f3072f905040c16dab18d; >= 628329d52474323938a03826941e166bc7c8eff4, < 47a9889a9325b87698b6d6eaf3187a9af6e4773d; >= 628329d52474323938a03826941e166bc7c8eff4, < d48795b5cd6828d36b707e8d62fc9e5c90e004ab
LinuxLinux3.10

References

Timeline

Published
Aug 15, 2026
Last modified
Aug 23, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-72078In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - validate control endpoint type The driver currently aCVE-2026-72079In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect ims_CVE-2026-72085.3Yealink SIP-T33G firmware versions 124.86.x.x prior to 124.87.0.0 contain a race condition vulnerability that allows authenticated attackersCVE-2026-720807.8In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix use-after-free during unmount During unmount or failurCVE-2026-72081In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efct_dispaCVE-2026-72082In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() When efct_hw_CVE-2026-720839.8In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE CVE-2026-720849.8In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the received buffer CVE-2026-720859.3In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command instead of double-puttingCVE-2026-72086In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free the command tag on the TMR submit-failure patCVE-2026-72087In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() The mCVE-2026-72088In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->
CVE-2026-72077: Unscored | Vulnix