Description
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging The debug logging in ims_pcu_irq() unconditionally prints data from pcu->urb_in_buf. However, if the interrupt fired for pcu->urb_ctrl, the actual data resides in pcu->urb_ctrl_buf. If urb->actual_length for the control URB exceeds pcu->max_in_size, this leads to an out-of-bounds read. Fix this by printing from the correct buffer associated with the URB.
EPSS 0.22%Risque 0
Voir la source- Publication
- 2026-08-15 06:21:17
- Versions concernées
- unknown
- Type
- Noyau
- Dernière modification
- 2026-08-17 06:18:06
- Vecteur
- Pending