CVE-2026-80989 net: thunderbolt: Mark the connection down when bringing it up fails

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnetconnectedwork undoes its own work and returns without clearing loginsent, so the connection still looks established. The next...

CVE-2026-80989

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnetconnectedwork undoes its own work and returns without clearing loginsent, so the connection still looks established. The next...

PT-2026-90120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the thunderbolt net driver. The function tb xdomain alloc in hopid uses ida alloc range to request a HopID; if the requested ID is taken, the allocator returns...

PT-2026-90453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB Type-C Thunderbolt implementation where the tbt altmode remove function drops plug and cable references without draining tbt-work. Because the work function...

CVE-2026-89737: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: typec: thunderbolt: Disable work before freeing tbt on remove tbtaltmoderemove drops the plug and cable references without draining tbt-work. The work function dereferences those references, and can also requeue itself in it...

CVE-2026-80990: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...

PT-2026-90119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt network component where failure paths in the tbnet connected work function do not clear the login sent variable. This causes the connection to appear...

CVE-2026-80989: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnetconnectedwork undoes its own work and returns without clearing loginsent, so the connection still looks established. The next...

The vulnerability of the __tb_property_parse_dir() function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the tbpropertyparsedir function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an...

The vulnerability of the format_dwdata() function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a hacker to access protected information or cause service failure.

The vulnerability of the formatdwdata function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in Linux’s operating system is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a malicious act...

Linux Distros Unpatched Vulnerability : CVE-2026-80736

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved...

The vulnerability of the tb_xdomain_match() function in the drivers/thunderbolt/xdomain.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the tbxdomainmatch function in the drivers/thunderbolt/xdomain.c module of the Linux operating system’s general support driver for USB4 and Thunderbolt is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow a...

The vulnerability of the __tb_property_parse_dir() function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux operating system allows a hacker to disclose protected information or cause service failures.

The vulnerability of the tbpropertyparsedir function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux operating system is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an...

The vulnerability of the tbproperty_entry_valid() function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tbpropertyentryvalid function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the tb_xdp_properties_request() function in the drivers/thunderbolt/xdomain.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tbxdppropertiesrequest function in the drivers/thunderbolt/xdomain.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...

SUSE CVE-2026-80736

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved. tbconsumeddpbandwidth uses the Group ID directly to index its local groupreserved array...

CVE-2026-80736

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved. tbconsumeddpbandwidth uses the Group ID directly to index its local groupreserved array...

CVE-2026-80736

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved. tbconsumeddpbandwidth uses the Group ID directly to index its local groupreserved array...

UBUNTU-CVE-2026-80736

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAXGROUPS, while Group ID 0 is reserved. tbconsumeddpbandwidth uses the Group ID directly to index its local groupreserved array...

CVE-2026-80736

CVE-2026-80736 is an out-of-bounds array indexing flaw in the Linux kernel's Thunderbolt subsystem , specifically in the tb_consumed_dp_bandwidth() function. Valid bandwidth group IDs range from 1 through MAX_GROUPS, but the local group_reserved[] array only has MAX_GROUPS entries (indices 0–MAX_...