In the Linux kernel, the following vulnerability has been resolved:
Input: ims-pcu - only expose sysfs attributes on control interface
When the driver was converted to use the driver core to instantiate device attributes (via .dev_groups in the usb_driver structure), the attributes started appearing on all interfaces bound to the driver. Since the ims-pcu driver manually claims the secondary data interface during probe, the driver core automatically creates the sysfs attributes for that interface as well.
However, the driver only supports these attributes on the primary control interface. Data interfaces lack the necessary descriptors and internal state to handle these requests, and accessing them can lead to unexpected behavior or crashes.
Fix this by updating the is_visible() callbacks for both the main and OFN attribute groups to verify that the interface being accessed is indeed the control interface.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 30, 2026 | Aug 30, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-7.0Upgrade linux-image-aws-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-azure-lts-26.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1017-azureUpgrade linux-image-realtimeUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-gcp-7.0Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-gke-64k-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-oem-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-gke-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-genericUpgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-7.0.0-1015-oemUpgrade linux-image-ibm-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-ibmUpgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-oracle-7.0 | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub