CVE-2026-80736

CVE-2026-80736 is an off-by-one indexing error in the Linux kernel Thunderbolt driver . The function tb_consumed_dp_bandwidth() uses a bandwidth group ID directly as an index into its local group_reserved[] array. Valid group IDs range from 1 through MAX_GROUPS (ID 0 is reserved), but the array o...