CVE-2026-80596

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Input: ims-pcu - only expose sysfs attributes on control interface<br /> <br /> When the driver was converted to use the driver core to instantiate device<br /> attributes (via .dev_groups in the usb_driver structure), the attributes<br /> started appearing on all interfaces bound to the driver. Since the ims-pcu<br /> driver manually claims the secondary data interface during probe, the<br /> driver core automatically creates the sysfs attributes for that interface<br /> as well.<br /> <br /> However, the driver only supports these attributes on the primary control<br /> interface. Data interfaces lack the necessary descriptors and internal<br /> state to handle these requests, and accessing them can lead to unexpected<br /> behavior or crashes.<br /> <br /> Fix this by updating the is_visible() callbacks for both the main and OFN<br /> attribute groups to verify that the interface being accessed is indeed the<br /> control interface.