CVE-2026-80990

CVE-2026-80990 is a resource-leak bug in the Linux kernel Thunderbolt networking (tbnet ) subsystem. In tbnet_connected_work(), the function requests a specific Rx HopID from tb_xdomain_alloc_in_hopid(), which uses ida_alloc_range() with the desired ID as a lower bound. If the requested ID is alr...

CVE-2026-80989 net: thunderbolt: Mark the connection down when bringing it up fails

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnetconnectedwork undoes its own work and returns without clearing loginsent, so the connection still looks established. The next...

PT-2026-72345

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags overflow by bounding frame count tbnet poll assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragment...

DEBIAN-CVE-2022-48955

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnetopen When tbringallocrx failed in tbnetopen, ida that allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release ida...

UBUNTU-CVE-2022-48955

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnetopen When tbringallocrx failed in tbnetopen, ida that allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release ida...

PT-2023-33197 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A memory leak was discovered in the tbnet open function. The issue was introduced in version v5.13 and is fixed in Linux Kernel version v5.15.83. Recommendations: For Linux Kernel versions...

PT-2023-33090 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: A memory leak issue exists in the tbnet open function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v6.0.13, update...

PT-2024-11824 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the tbnet open function. This issue occurs when tb ring alloc rx fails, causing the ida allocated in tb...