CVE-2026-72077

Summary

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - fix firmware leak in async update

The firmware object was not being released if validation failed. Use __free(firmware) to ensure the firmware is always released.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < a5dd47ea3904dedb1ae7a5fe0e6b44a458f0c5ecaffected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < 1f7bdfbe791aacad77db87f044e78ef60a93ae0daffected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < 99c428d7ef644d3e394f3072f905040c16dab18daffected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < 47a9889a9325b87698b6d6eaf3187a9af6e4773daffected
LinuxLinux628329d52474323938a03826941e166bc7c8eff4 < d48795b5cd6828d36b707e8d62fc9e5c90e004abaffected
LinuxLinux3.10affected
LinuxLinux0 < 3.10unaffected
LinuxLinux6.6.148 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References