SUSE CVE-2026-98896

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that may run after the domain has been removed by tbdomainremove. For example if user unloads the driver while at the same...

CVE-2026-98896

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that may run after the domain has been removed by tbdomainremove. For example if user unloads the driver while at the same...

CVE-2026-98896 thunderbolt: Keep the domain reference while processing hotplug

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that may run after the domain has been removed by tbdomainremove. For example if user unloads the driver while at the same...

EUVD-2026-108690

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that may run after the domain has been removed by tbdomainremove. For example if user unloads the driver while at the same...

CVE-2026-98896

The Linux kernel contains a vulnerability in the thunderbolt driver where hotplug events are processed in a workqueue. This can lead to a Use-After-Free (UAF) condition if the domain is removed via tb_domain_remove() (e.g., during a driver unload) while the tb_handle_hotplug() handler is still sc...

CVE-2026-98896

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that may run after the domain has been removed by tbdomainremove. For example if user unloads the driver while at the same...

CVE-2026-98896 thunderbolt: Keep the domain reference while processing hotplug

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that may run after the domain has been removed by tbdomainremove. For example if user unloads the driver while at the same...

CVE-2026-98694

A flaw was found in the Linux kernel's Thunderbolt driver. When a control channel request is canceled, a race condition can cause the request to be rescheduled after its memory has already been freed, resulting in a use-after-free vulnerability. A local attacker could exploit this flaw to cause a...

CVE-2026-98693

A flaw was found in the Linux kernel's Thunderbolt driver. A physically proximate user or local attacker could trigger a Denial of Service DoS and crash the system by disconnecting a device or unbinding the driver while DisplayPort tunnel operations are still active. This issue occurs because the...

CVE-2026-98692

A flaw was found in the Linux kernel's Thunderbolt subsystem. DisplayPort DP tunnels activated without a required completion callback fail to release object references during tunnel setup, such as when restoring from system hibernation. A local user or repeated hibernation cycles can cause kernel...

CVE-2026-98691

A flaw was found in the Linux kernel's Thunderbolt subsystem. This vulnerability can lead to a Denial of Service DoS or system instability when a Thunderbolt device is disconnected or unbound. When a Thunderbolt domain is stopped, inactive DisplayPort DP tunnels are not properly torn down, allowi...

CVE-2026-98690

A flaw was found in the Linux kernel's Thunderbolt subsystem. This flaw allows a local user to cause a Denial of Service DoS by causing kernel cleanup operations to hang indefinitely. When a DisplayPort DP tunnel is disconnected before an internal read operation completes, the driver leaks an...

CVE-2026-98689

A flaw was found in the Linux kernel's Thunderbolt subsystem. A race condition occurs when DisplayPort DP read operations are canceled during system suspend or device disconnection, allowing work handlers to access tunnel structures that have already been torn down. A local attacker could trigger...

CVE-2026-98688

A flaw was found in the Linux kernel's Thunderbolt subsystem. A race condition during device removal operations can lead to a NULL pointer dereference. A local user could exploit this timing issue during device disconnection to trigger a kernel crash, resulting in a Denial of Service DoS...

CVE-2026-98687

A flaw was found in the Linux kernel's Thunderbolt driver. When processing property requests from peer devices, the driver fails to verify that the response data length does not exceed the allocated buffer size. A malicious peer can exploit this flaw by sending an oversized response packet,...

SUSE CVE-2026-98690

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain reference leak when DPRX read is canceled tbtunnelonedp takes a domain reference which is only dropped once tbdptunnelactive has run on the work queue. If that work is cancelled that reference is leaked...

SUSE CVE-2026-98689

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Don't access a DP tunnel after its DPRX read was canceled tbdpdprxwork checks -dprxcanceled before it takes tb-lock so it misses a tbdpdprxstop that could not cancel the already running work. It then polls the DPRX...

SUSE CVE-2026-98687

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject oversized XDomain properties responses tbxdppropertiesrequest allocates room for 45 data dwords in its 252-byte response buffer. The XDomain length field is six bits wide, however, and a malicious peer can set...

SUSE CVE-2026-98688

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix NULL dereference in tbremovework There is a slight race between tbremovework and tbdomainremove which leads to dereferencing a NULL tb-rootswitch pointer inside tbfreeunpluggedxdomains: Thread A Thread B...

Linux Distros Unpatched Vulnerability : CVE-2026-98691

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Tear down inactive DP tunnels when the domain is stopped tbstop only tears down DMA tunnels so a DP tunnel that is still waiting for dprxwork to...