CVE-2026-80736

A flaw was found in the Linux kernel's Thunderbolt driver. The tbconsumeddpbandwidth function attempts to access an array beyond its allocated memory, specifically when handling bandwidth group IDs. This out-of-bounds read can lead to an incorrect calculation of reserved bandwidth for Thunderbolt...

CVE-2026-80736: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved. tbconsumeddpbandwidth uses the Group ID directly to index its local groupreserved array...