56 matches found
ROS-20260922-73-0096
The vulnerability of the tbxdppropertiesrequest function in the drivers/thunderbolt/xdomain.c file of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...
CVE-2026-89737
A flaw was found in the Linux kernel's USB Type-C Thunderbolt driver. The tbtaltmoderemove function fails to properly disable and drain work items before freeing associated plug and cable references. This oversight can lead to a use-after-free vulnerability, where the system attempts to access...
AZL-100662 CVE-2026-80990 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...
CVE-2026-80990
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...
The vulnerability of the __tb_property_parse_dir() function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the tbpropertyparsedir function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an...
The vulnerability of the format_dwdata() function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a hacker to access protected information or cause service failure.
The vulnerability of the formatdwdata function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in Linux’s operating system is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a malicious act...
The vulnerability of the tb_xdp_properties_request() function in the drivers/thunderbolt/xdomain.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tbxdppropertiesrequest function in the drivers/thunderbolt/xdomain.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...
CVE-2026-74585
A flaw was found in the Linux kernel's Thunderbolt driver. A malicious or malformed Thunderbolt device can provide an invalid port number, leading to an out-of-bounds memory access. This can result in memory corruption and potentially lead to a denial of service or other unspecified impacts...
SUSE CVE-2026-74691
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
CVE-2026-74691
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
CVE-2026-74691 net: thunderbolt: Tear down DMA paths before stopping the rings
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
EUVD-2026-64378
In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...
Linux Distros Unpatched Vulnerability : CVE-2026-74691
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling...
CVE-2026-72157
A flaw was found in the Linux kernel's Thunderbolt network driver. A remote attacker could send specially crafted ThunderboltIP packets with an excessive number of frames. This could lead to an overflow in the frags array, causing memory corruption after the shared information buffer. This...
CVE-2026-53149
A flaw was found in the Linux kernel's Thunderbolt driver. The tbpropertyparsedir function, responsible for parsing root directory content, does not properly validate the size of the content against the allocated block size. This oversight allows the system to read beyond the intended memory...
CVE-2026-53148
A flaw was found in the Linux kernel's Thunderbolt driver. A malicious peer can exploit this vulnerability by sending a specially crafted response that causes the system to write data beyond an allocated memory buffer. This out-of-bounds write can lead to memory corruption, which may allow an...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992838)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992838 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...
PT-2025-42707
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the thunderbolt driver, specifically in the tb dp dprx work function. The original code used cancel delayed work, which did not...