7 matches found
CVE-2026-72157
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags overflow by bounding framecount tbnetpoll assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragment...
UBUNTU-CVE-2026-72157
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags overflow by bounding framecount tbnetpoll assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragment...
CVE-2026-72157 net: thunderbolt: Fix frags[] overflow by bounding frame_count
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags overflow by bounding framecount tbnetpoll assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragment...
CVE-2026-72157 net: thunderbolt: Fix frags[] overflow by bounding frame_count
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags overflow by bounding framecount tbnetpoll assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragment...
CVE-2026-72157
The CVE-2026-72157 fix in the Linux kernel narrows the allowed ThunderboltIP packet frame count to prevent skb frags overflow. tbnet_poll() assembles multi-frame packets into one skb with fragments; if a peer sends more than MAX_SKB_FRAGS frames, skb_add_rx_frag() wrote past frags[] and corrupted...
EUVD-2026-58915
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags overflow by bounding framecount tbnetpoll assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragment...
PT-2026-72345
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ThunderboltIP packet assembly process where the tbnet poll function assembles multi-frame packets into a single socket buffer skb. The tbnet check frame function...