The Linux kernel IMS‑PCU driver logs control transfer data directly from the urb_in_buf buffer during an interrupt, regardless of which URB triggered the interrupt. When the interrupt occurs for a control transfer and the actual transfer length exceeds the allocated buffer size, the debug routine reads beyond the intended memory region. The resulting out‑of‑bounds read can leak kernel memory contents into system logs, potentially revealing sensitive information such as credentials or cryptographic keys. There is no direct privilege escalation or code execution impact described, but the information disclosure could assist attackers in further exploits.

All Linux kernel distributions that include the IMS‑PCU driver are potentially affected. The advisory does not list specific kernel versions, so any kernel build that has not yet applied the patch that corrects the debug logging routine may be vulnerable.

The advisory provides a CVSS score of 5.5 and an EPSS score of less than 1%; the vulnerability is not listed in CISA KEV. The exploitation requires a privileged kernel context to trigger the specific interrupt sequence and rely on debug logging being enabled. While the probability of successful exploitation is low in typical environments, the potential for data leakage warrants prompt attention. No additional mitigations are described beyond applying the patch or disabling the driver’s debug logging.