CVE-2026-63892 thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow

🗓️ 19 Jul 2026 14:55:03Reported by LinuxType

Thunderbolt property rejects dir_len four on non root path to prevent size_t underflow.

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2026-63892	19 Jul 202614:55	–	cve
Debian CVE	CVE-2026-63892	19 Jul 202614:55	–	debiancve
EUVD	EUVD-2026-45665	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63892	19 Jul 202616:17	–	nvd
OSV	CVE-2026-63892 thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow	19 Jul 202614:55	–	osv
OSV	DEBIAN-CVE-2026-63892	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63892	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61209	19 Jul 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-63892	21 Jul 202620:25	–	redhatcve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-63892	20 Jul 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/thunderbolt/property.c"
    ],
    "versions": [
      {
        "version": "cdae7c07e3e3509eaabc18c1640a55dc5b99c179",
        "lessThan": "37abc4504fa19d8f9f1e87792e8a2b8fdb308e40",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cdae7c07e3e3509eaabc18c1640a55dc5b99c179",
        "lessThan": "e2d4d51cf5785815fa4e91e0c019e3eb2506a84c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cdae7c07e3e3509eaabc18c1640a55dc5b99c179",
        "lessThan": "de618299190b418291609e6921557253bd417e25",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cdae7c07e3e3509eaabc18c1640a55dc5b99c179",
        "lessThan": "5506c825f14d810f0690b1f4367cb7249ebb387a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cdae7c07e3e3509eaabc18c1640a55dc5b99c179",
        "lessThan": "542a13890b742099c461d70920e97b14e568f6ec",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cdae7c07e3e3509eaabc18c1640a55dc5b99c179",
        "lessThan": "d548179adcc87e1bc66b17e00352a1f536e76065",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cdae7c07e3e3509eaabc18c1640a55dc5b99c179",
        "lessThan": "3bec49ca55e08fb085cc4318f24b1b37eaab28cb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cdae7c07e3e3509eaabc18c1640a55dc5b99c179",
        "lessThan": "de21b59c29e31c5108ddc04210631bbfab81b997",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/thunderbolt/property.c"
    ],
    "versions": [
      {
        "version": "4.15",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.15",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.259",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.210",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.176",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.143",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.93",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.35",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.12",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/3bec49ca55e08fb085cc4318f24b1b37eaab28cb
git	www.git.kernel.org/stable/c/de21b59c29e31c5108ddc04210631bbfab81b997
git	www.git.kernel.org/stable/c/542a13890b742099c461d70920e97b14e568f6ec
git	www.git.kernel.org/stable/c/e2d4d51cf5785815fa4e91e0c019e3eb2506a84c
git	www.git.kernel.org/stable/c/de618299190b418291609e6921557253bd417e25
git	www.git.kernel.org/stable/c/37abc4504fa19d8f9f1e87792e8a2b8fdb308e40
git	www.git.kernel.org/stable/c/d548179adcc87e1bc66b17e00352a1f536e76065
git	www.git.kernel.org/stable/c/5506c825f14d810f0690b1f4367cb7249ebb387a

19 Jul 2026 14:55Current

EPSS0.0022