CVE-2026-74585

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number before indexing sw-ports tbdromparseentryport validates the device-supplied header-index against sw-config.maxportnumber before indexing sw-ports, but the sibling field...

CVE-2026-74585 thunderbolt: Bound the DROM dual link port number before indexing sw->ports

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Bound the DROM dual link port number before indexing sw-ports tbdromparseentryport validates the device-supplied header-index against sw-config.maxportnumber before indexing sw-ports, but the sibling field...

PT-2026-79590

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Thunderbolt subsystem where the tb drom parse entry port function fails to validate the dual link port nr field read from the Device ROM DROM. While the header-ind...

Linux Distros Unpatched Vulnerability : CVE-2026-74585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Bound the DROM dual link port number before indexing sw-ports tbdromparseentryport validates the device-supplied header-index against...