In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not… (CVE-2026-72077)
A vulnerability in the Linux kernel related to the ims-pcu component was resolved. The issue involved a firmware object not being released properly if validation failed during an asynchronous update, causing a firmware leak. The fix ensures that the firmware object is always released using __free(firmware).
AI Analysis
Technical Summary
This vulnerability in the Linux kernel's ims-pcu component caused a firmware object leak when validation failed during asynchronous firmware updates. The firmware object was not released properly, potentially leading to resource leaks. The issue was fixed by adding a call to __free(firmware) to guarantee the firmware object is always released regardless of validation outcome.
Potential Impact
The vulnerability results in a firmware object leak in the Linux kernel, which could lead to resource exhaustion or instability over time. There is no indication of direct code execution or privilege escalation. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to ensure the firmware object is always released. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not… (CVE-2026-72077)
Description
A vulnerability in the Linux kernel related to the ims-pcu component was resolved. The issue involved a firmware object not being released properly if validation failed during an asynchronous update, causing a firmware leak. The fix ensures that the firmware object is always released using __free(firmware).
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in the Linux kernel's ims-pcu component caused a firmware object leak when validation failed during asynchronous firmware updates. The firmware object was not released properly, potentially leading to resource leaks. The issue was fixed by adding a call to __free(firmware) to guarantee the firmware object is always released regardless of validation outcome.
Potential Impact
The vulnerability results in a firmware object leak in the Linux kernel, which could lead to resource exhaustion or instability over time. There is no indication of direct code execution or privilege escalation. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to ensure the firmware object is always released. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-h3wj-cv4f-364h
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72077"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b77bf8831d539500d50
Added to database: 08/15/2026, 15:53:27 UTC
Last enriched: 08/15/2026, 17:02:33 UTC
Last updated: 08/15/2026, 19:41:13 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.