CVE-2026-53164

The CVE-2026-53164 entry concerns the Linux kernel IOMMU DMA SWIOTLB path. The vulnerability arises when iommu_dma_iova_link_swiotlb() maps an unaligned memory region and, if the middle portion is empty, calls iommu_map() with a 0 size, which the iommu_pt implementation treats as illegal, corrupt...

DEBIAN-CVE-2025-37843

In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Avoid unnecessary device replacement check Hot-removal of nested PCI hotplug ports suffers from a long-standing race condition which can lead to a deadlock: A parent hotplug port acquires pcilockrescanremove, then...

[SECURITY] Fedora 37 Update: plasma-thunderbolt-5.27.1-1.fc37

Plasma Sytem Settings module and a KDED module to handle authorization of Thunderbolt devices connected to the computer. There's also a shared library libkbolt that implements common interface between the modules and the system-wide bolt daemon, which does the actual hard work of talking to the...

Thunderbolt microcontroller memory access

The vulnerability of Thunderbolt device microcontrollers is related to errors in the implementation of the SPI Flash interface. Exploiting this vulnerability can allow an attacker to gain direct access to the memory of computing devices, to which Thunderbolt-enabled devices are connected...

Thunderbolt Device Memory Access

The vulnerability of Thunderbolt device microcontrollers is related to the lack of protection at the “Work Camp” level. Exploiting this vulnerability can allow an attacker to gain direct access to the memory of computing devices, to which Thunderbolt devices are connected...

Thunderbolt Weak Authentication Memory Disclosure

The vulnerability of Thunderbolt device microcontrollers is related to the use of a weak authentication mechanism for devices. Exploiting this vulnerability can allow attackers to gain direct access to the memory of computing devices, to which Thunderbolt devices are connected...

Thunderbolt microcontroller metadata loading

The vulnerability of Thunderbolt devices’ microcontrollers relates to the ability to load metadata from an unauthenticated device. Exploiting this vulnerability can allow a hacker to gain direct access to the memory of the computing device, which is connected to Thunderbolt devices...

Thunderbolt Firmware Verification

The vulnerability of Thunderbolt device microcontrollers is related to the use of inadequate firmware verification schemes. Exploiting this vulnerability can allow an attacker to gain direct access to the memory of the computing device, to which Thunderbolt devices are connected...

PT-2020-2632

Name of the Vulnerable Software and Affected Versions Thunderbolt devices affected versions not specified Description The issue is related to a vulnerability in Thunderbolt device microcontrollers, which can be exploited by using configuration parameters of an unauthenticated controller. This cou...

Apple Patches Thunderstrike Bug in OSX, Fixes More Than 30 Flaws in iOS

Apple has released major security updates for both OS X and iOS that includes patches for a number of bugs that could lead to arbitrary code execution. The release of iOS 8.1.3 fixes a vulnerability that allowed an attacker to bypass the sandbox restrictions in Safari and the OS X update fixes a...

Mac EFI is exposed a major security vulnerability by Thunderbolt devices to spread malicious programs-vulnerability warning-the black bar safety net

Next week, Germany at the Chaos Communication Congress Security Conference, a researcher Trammell Hudson will present a new method, through the unique production of Thunderbolt devices in the Mac EFI boot firmware in the injection almost impossible to not remove the Bootkit virus. The exploits of...