CVE-2026-80736

CVE-2026-80736 is an off-by-one indexing error in the Linux kernel Thunderbolt driver . The function tb_consumed_dp_bandwidth() uses a bandwidth group ID directly as an index into its local group_reserved[] array. Valid group IDs range from 1 through MAX_GROUPS (ID 0 is reserved), but the array o...

CVE-2026-80736 thunderbolt: Fix bandwidth group reservation indexing

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved. tbconsumeddpbandwidth uses the Group ID directly to index its local groupreserved array...

EUVD-2026-70340

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved. tbconsumeddpbandwidth uses the Group ID directly to index its local groupreserved array...