CVE-2026-98690

The Linux kernel contains a vulnerability in the thunderbolt driver where a domain reference is leaked when a DPRX read is canceled. Specifically, the tb_tunnel_one_dp() function takes a reference that is only dropped once; if tb_dp_tunnel_active() work is canceled, the reference remains leaked. ...

CVE-2026-98690

In the Linux kernel, the following vulnerability has been resolved: t...

CVE-2026-98689

In the Linux kernel, the following vulnerability has been resolved: t...

EUVD-2026-103943

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Don't access a DP tunnel after its DPRX read was canceled tbdpdprxwork checks -dprxcanceled before it takes tb-lock so it misses a tbdpdprxstop that could not cancel the already running work. It then polls the DPRX...

CVE-2026-98689

The Linux kernel contains a vulnerability in the thunderbolt component where tb_dp_dprx_work() checks the ->dprx_canceled flag before acquiring the tb->lock. This race condition allows the system to miss a tb_dp_dprx_stop() call, resulting in the kernel polling and running a callback for a ...