SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72075

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A race condition vulnerability exists in the Linux kernel's ims-pcu component, where the ims_pcu_reset_device() sysfs callback can invoke ims_pcu_execute_command() without proper mutex protection. This oversight may lead to data races and potential corruption of the shared command buffer when commands are executed concurrently. Linux system administrators and developers utilizing the affected kernel should prioritize applying the fix to mitigate risks associated with data integrity and system stability.

CVE
CVE-2026-72075
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix race condition in reset_device sysfs callback The ims_pcu_reset_device() sysfs callback calls ims_pcu_execute_command() without acquiring pcu->cmd_mutex. This can lead to data races and corruption of the shared command buffer if triggered concurrently with other commands. Acquire pcu->cmd_mutex before calling ims_pcu_execute_command().