Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Thunderbolt: Mark the XDomain as unplugged when the router is removed. I noticed that when we perform discrete host-router NVM upgrades, and the router is hot-unplugged due to NVM firmware authentication issues, if there are othe...

flash-xdomain-xploit

Autor: Gursev Singh Kalra [email protected] Evadiendo la política de mismo origen con Flash y crossdomain.xml inseguro Compilando e implementando el código ActionScript de prueba de concepto 1. Descargue e instale Apache Flex SDK. Viene con un compilador de ActionScript. 2. Copie el código...

SUSE CVE-2026-97509

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

DEBIAN-CVE-2026-97509

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

AZL-103547 CVE-2026-97509 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

CVE-2026-97509

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

UBUNTU-CVE-2026-97509

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

CVE-2026-97509

A vulnerability in the Linux kernel 's thunderbolt component was addressed to ensure the XDomain reference is maintained throughout the lifetime of a service. The root cause involved a scenario where the service ID was released in tb_service_release(), while the associated ID array was still owne...

EUVD-2026-86107

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

CVE-2026-97509 thunderbolt: Keep XDomain reference during the lifetime of a service

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

PT-2026-98128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt component where the XDomain reference is not maintained during the lifetime of a service. This occurs because the service ID is released in the tb...

PT-2026-98129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the thunderbolt component when the tb xdomain response function is executed. If the tb cfg request function fails to set up a request, such as when the control...

CVE-2026-97509: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

CVE-2026-97509

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...

Linux Distros Unpatched Vulnerability : CVE-2026-97509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: A memory leak has been fixed in tbnetopen. When tbringallocrx fails in tbnetopen, the memory allocated in tbxdomainallocouthopid is not released. Add tbxdomainreleaseouthopid to the error path to release the...

Linux Distros Unpatched Vulnerability : CVE-2026-80990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a...

CVE-2026-80990

A flaw was found in the Linux kernel's Thunderbolt networking driver. An issue in the tbnetconnectedwork function can lead to a resource leak. When an unexpected HopID is allocated during an XDomain connection, the ID is not properly released, causing it to remain active without a reference. This...

CVE-2026-80990

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...

DEBIAN-CVE-2026-80990

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was handed out on mismatch tbxdomainallocinhopid passes the wanted HopID to idaallocrange as the lower bound, so a taken id is not an error there: the allocator returns the next free on...