PT-2026-82896

CVE-2026-80596

·

تاريخ النشر

2026-05-31

·

تاريخ التحديث

2026-10-09

الوصف من

CVSS 3.1
8.4
عالية
المقاييسAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the ims-pcu driver where sysfs attributes are incorrectly exposed on all interfaces bound to the driver, including the secondary data interface. This occurs because the driver core automatically creates these attributes for all claimed interfaces via the .dev groups in the usb driver structure. Because data interfaces lack the required internal state and descriptors to handle these requests, accessing these attributes on a data interface can result in crashes or unexpected behavior.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾