CVE-2026-63891
The CVE affects the Linux kernel Thunderbolt property parser. A crafted peer can trigger a back‑reference loop in DIRECTORY entries, exhausting stack via __tb_property_parse_dir() because the value is used as dir_offset without a depth counter. The fix threads a depth counter through tb_property_...