Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Thunderbolt: Mark the XDomain as unplugged when the router is removed. I noticed that when we perform discrete host-router NVM upgrades, and the router is hot-unplugged due to NVM firmware authentication issues, if there are othe...

CVE-2026-80990

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...

Linux Distros Unpatched Vulnerability : CVE-2026-80990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a...

CVE-2026-80990

A flaw was found in the Linux kernel's Thunderbolt networking driver. An issue in the tbnetconnectedwork function can lead to a resource leak. When an unexpected HopID is allocated during an XDomain connection, the ID is not properly released, causing it to remain active without a reference. This...

DEBIAN-CVE-2026-80990

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...

CVE-2026-80990

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...

CVE-2026-80990 net: thunderbolt: Release the Rx HopID that was handed out on mismatch

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...

EUVD-2026-76313

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...

flash-xdomain-xploit

Author: Gursev Singh Kalra [email protected] 使用 Flash 和不安全的 crossdomain.xml 绕过同源策略 编译并部署概念验证 ActionScript 代码 1. 下载并安装 Apache Flex SDK。它附带 ActionScript 编译器。 2. 将 ActionScript 代码复制到本地目录，并将其命名为 XDomainXploit.as。 3. 根据你的需要，将 readFrom 和 sendTo 参数的值更改为合适的值。 4. 使用 mxmlc 编译器将代码编译为 Flash...

PT-2026-90120

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tb xdomain alloc in hopid passes the wanted HopID to ida alloc range as the lower bound, so a taken id is not an error there: the allocator returns the next...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: A memory leak has been fixed in tbnetopen. When tbringallocrx fails in tbnetopen, the memory allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release the...

SUSE CVE-2026-74691

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...

CVE-2026-74691

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...

CVE-2026-74691

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...

UBUNTU-CVE-2026-74691

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...

CVE-2026-74691 net: thunderbolt: Tear down DMA paths before stopping the rings

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...

CVE-2026-74691

CVE-2026-74691 is a teardown ordering bug in the Linux kernel Thunderbolt network driver (net: thunderbolt / tbnet). The driver stops its DMA rings and frees frame buffers before deactivating the high-speed DMA paths, but the setup path was previously fixed to enable paths last. Teardown was neve...

CVE-2026-74691 net: thunderbolt: Tear down DMA paths before stopping the rings

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnetteardown stops both rings and frees their frame buffers before calling tbxdomaindisablepaths. tbringstop zeroes the ring's descriptor base and tbnetfreebuffers...

PT-2026-79696

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Tear down DMA paths before stopping the rings tbnet tear down stops both rings and frees their frame buffers before calling tb xdomain disable paths. tb ring stop zeroes the ring's descriptor base and tbnet free...

CVE-2026-74575

A flaw was found in the Thunderbolt XDomain driver of the Linux kernel. A race condition can occur during the removal of a Thunderbolt cross-domain device XDomain. This allows a delayed work item to be queued after its cancellation but before the XDomain object is freed, leading to a use-after-fr...