PT-2026-82896
CVE-2026-80596
·
Published
2026-05-31
·
Updated
2026-10-09
Description by
CVSS 3.1
8.4
HighMetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the ims-pcu driver where sysfs attributes are incorrectly exposed on all interfaces bound to the driver, including the secondary data interface. This occurs because the driver core automatically creates these attributes for all claimed interfaces via the
.dev groups in the usb driver structure. Because data interfaces lack the required internal state and descriptors to handle these requests, accessing these attributes on a data interface can result in crashes or unexpected behavior.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾