ROOT-OS-UBUNTU-2404-CVE-2026-53149 CVE-2026-53149 in linux - Patched by Root

Root has patched CVE-2026-53149 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

CVE-2026-53149 vulnerabilities

Vulnerabilities for packages: linux-aws, linux-qemu, linux-qemu-melange, linux-azure, linux-vmware, linux-gcp...

CVE-2026-53149

CVE-2026-53149 affects the Linux kernel Thunderbolt code path, where __tb_property_parse_dir() may read beyond the root directory block due to missing bounds checks on content_offset/content_len. The issue could allow reading past a directory block, with high impact to confidentiality and availab...