CVE-2026-72078: Input: ims-pcu - validate control endpoint type

CVE-2026-72078: Input: ims-pcu - validate control endpoint type

[Greg Kroah-Hartman]

From: Greg Kroah-Hartman <gregkh@kernel.org>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

Input: ims-pcu - validate control endpoint type

The driver currently assumes that the first endpoint of the control
interface is an interrupt IN endpoint without verifying it. A malicious
device could provide a different endpoint type, which would then be
passed to usb_fill_int_urb(), potentially leading to kernel warnings
or undefined behavior.

Verify that the control endpoint is an interrupt IN endpoint.

The Linux kernel CVE team has assigned CVE-2026-72078 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 3.10 with commit 628329d52474323938a03826941e166bc7c8eff4 and fixed in 5.10.261 with commit 5de5075a1f26166f172b6687cb66810a9b61e3eb
	Issue introduced in 3.10 with commit 628329d52474323938a03826941e166bc7c8eff4 and fixed in 5.15.212 with commit 7960d99332e03705ec622d92f31e0c77de8baac6
	Issue introduced in 3.10 with commit 628329d52474323938a03826941e166bc7c8eff4 and fixed in 6.1.178 with commit 5b96b4da96313dd799a3a40dcfd598d2e2c19217
	Issue introduced in 3.10 with commit 628329d52474323938a03826941e166bc7c8eff4 and fixed in 6.6.145 with commit aa1885f87e60c80e59e50ffd5fb096bf02c83e05
	Issue introduced in 3.10 with commit 628329d52474323938a03826941e166bc7c8eff4 and fixed in 6.12.97 with commit a630508a09b0c05f14bc0843ed409221a93751aa
	Issue introduced in 3.10 with commit 628329d52474323938a03826941e166bc7c8eff4 and fixed in 6.18.40 with commit c8d3d83f2eaaf7659de76e8d44e8fc88ee346042
	Issue introduced in 3.10 with commit 628329d52474323938a03826941e166bc7c8eff4 and fixed in 7.1.5 with commit cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e
	Issue introduced in 3.10 with commit 628329d52474323938a03826941e166bc7c8eff4 and fixed in 7.2-rc1 with commit baf56975806534268e24acf9a8abb1c447ce11e9

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2026-72078
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/input/misc/ims-pcu.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/5de5075a1f26166f172b6687cb66810a9b61e3eb
	https://git.kernel.org/stable/c/7960d99332e03705ec622d92f31e0c77de8baac6
	https://git.kernel.org/stable/c/5b96b4da96313dd799a3a40dcfd598d2e2c19217
	https://git.kernel.org/stable/c/aa1885f87e60c80e59e50ffd5fb096bf02c83e05
	https://git.kernel.org/stable/c/a630508a09b0c05f14bc0843ed409221a93751aa
	https://git.kernel.org/stable/c/c8d3d83f2eaaf7659de76e8d44e8fc88ee346042
	https://git.kernel.org/stable/c/cbfa059dfb48b9aa322e34fd44a093d9ca29ad7e
	https://git.kernel.org/stable/c/baf56975806534268e24acf9a8abb1c447ce11e9