Answer in brief
CVE-2026-80596 records a High severity (CVSS 8.4) vulnerability in Input: ims-pcu - only expose sysfs attributes on control interface. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 8.4. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=204d18a7a0c67352857dee1bbac517ed63f01d8e <7d5e7c8d48f0aaeb9ec90a9a4f450f3c5e422431 || >=204d18a7a0c67352857dee1bbac517ed63f01d8e <87e2f89dea078572fb9e13864cec2b1bd8e89b71 || >=204d18a7a0c67352857dee1bbac517ed63f01d8e <73e6687be0c1c323a8ec5b733f29440a93e08ff2 || >=204d18a7a0c67352857dee1bbac517ed63f01d8e <001428ea4d2c371107cb984108e266adf99f1f1e | 7d5e7c8d48f0aaeb9ec90a9a4f450f3c5e422431, 87e2f89dea078572fb9e13864cec2b1bd8e89b71, 73e6687be0c1c323a8ec5b733f29440a93e08ff2, 001428ea4d2c371107cb984108e266adf99f1f1e |
| Linux/Linuxgeneric | 6.11 | Not reported |
Published upstream
Aug 28, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 29, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 28, 2026
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on control interface When the driver was converted to use the driver core to instantiate device attributes (via .dev_groups in the usb_driver structure), the attributes started appearing on all interfaces bound to the driver. Since the ims-pcu driver manually claims the secondary data interface during probe, the driver core automatically creates the sysfs attributes for that interface as well. However, the driver only supports these attributes on the primary control interface. Data interfaces lack the necessary descriptors and internal state to handle these requests, and accessing them can lead to unexpected behavior or crashes. Fix this by updating the is_visible() callbacks for both the main and OFN attribute groups to verify that the interface being accessed is indeed the control interface.
Quoted source text, attributed separately from HOL analysis.