CVE-2026-80596
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
28/08/2026
Última modificación:
28/08/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
Input: ims-pcu - only expose sysfs attributes on control interface<br />
<br />
When the driver was converted to use the driver core to instantiate device<br />
attributes (via .dev_groups in the usb_driver structure), the attributes<br />
started appearing on all interfaces bound to the driver. Since the ims-pcu<br />
driver manually claims the secondary data interface during probe, the<br />
driver core automatically creates the sysfs attributes for that interface<br />
as well.<br />
<br />
However, the driver only supports these attributes on the primary control<br />
interface. Data interfaces lack the necessary descriptors and internal<br />
state to handle these requests, and accessing them can lead to unexpected<br />
behavior or crashes.<br />
<br />
Fix this by updating the is_visible() callbacks for both the main and OFN<br />
attribute groups to verify that the interface being accessed is indeed the<br />
control interface.



