CVE-2026-63891 thunderbolt: property: Cap recursion depth in __tb_property_parse_dir()

🗓️ 19 Jul 2026 14:55:02Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Thunderbolt property parser caps recursion depth to eight to prevent stack exhaustion from XDomain loops.

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2026-63891	19 Jul 202614:55	–	cve
Cvelist	CVE-2026-63891 thunderbolt: property: Cap recursion depth in __tb_property_parse_dir()	19 Jul 202614:55	–	cvelist
EUVD	EUVD-2026-45664	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63891	19 Jul 202616:17	–	nvd
OSV	DEBIAN-CVE-2026-63891	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63891	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61208	19 Jul 202600:00	–	ptsecurity

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/0a84ab9271936c11e84e511bb52fc5682f8b6726
git	www.git.kernel.org/stable/c/2b5f47a710172c962ef42d1b732b04d2ad0dce21
git	www.git.kernel.org/stable/c/830c8a9b467e7d3a158483d37fa7dc13892b293a
git	www.git.kernel.org/stable/c/928abe19fbf0127003abcb1ea69cabc1c897d0ab
git	www.git.kernel.org/stable/c/95839a67ea56ca35732aad7f711404a3127cfe2d
git	www.git.kernel.org/stable/c/b4621e5ef63405c317a84b711faf3bd75b3c6a94
git	www.git.kernel.org/stable/c/ed9455ef4bd9babc90f92e526abe3fb68c1a8709
git	www.git.kernel.org/stable/c/f31c6d220f455b5af63590302b30e1b932d14599
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63891.json

20 Jul 2026 03:47Current

5.3Medium risk

Vulners AI Score5.3

EPSS0.00263

thunderbolt property parse depth xdomain back reference loop stack exhaustion max depth eight disable xdomain