PT-2026-82896

CVE-2026-80596

·

Published

2026-05-31

·

Updated

2026-10-09

Description by

CVSS 3.1
8.4
High
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the ims-pcu driver where sysfs attributes are incorrectly exposed on all interfaces bound to the driver, including the secondary data interface. This occurs because the driver core automatically creates these attributes for all claimed interfaces via the .dev groups in the usb driver structure. Because data interfaces lack the required internal state and descriptors to handle these requests, accessing these attributes on a data interface can result in crashes or unexpected behavior.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
Found an issue in the description? Have something to add? Feel free to write us 👾