EUVD-2023-32092

Improper access control in firmware for some IntelR ThunderbolTM Controllers versions before 41 may allow a privileged user to enable denial of service via local access...

CVE-2020-12327

Insecure default variable initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2020-12291

Uncontrolled resource consumption in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12293

Improper control of a resource through its lifetime in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12288

Protection mechanism failure in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12294

Insufficient control flow management in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12290

Improper access control in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12289

Out-of-bounds write in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12326

Improper initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-12292

Improper conditions check in some IntelR ThunderboltTM controllers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-25779

Uncontrolled search path element in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25777

Improper access control in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37410

Improper access control for some IntelR Thunderbolt driver software before version 89 may allow an authenticated user to potentially enable escalation of privilege via local access...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992838 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993104 advisory. In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Mark XDomain as unplugged when router is removed I noticed that when we do discrete...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992227)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992227 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990835 advisory. In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Mark XDomain as unplugged when router is removed I noticed that when we do discrete...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990094 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free of slot-bus on hot remove Dennis reports a boot crash on recent Lenovo...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Thunderbolt: Do not double-dequeue a configuration request. Some of our devices may crash when calling tbcfgrequestdequeue: This issue is likely due to a general protection fault, possibly related to the non-canonical address...

Linux Distros Unpatched Vulnerability : CVE-2025-40002

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Fix use-after-free in tbdpdprxwork The original code relies on canceldelayedwork in tbdpdprxstop, which does not ensure that the delayed work item...