CVE-2026-53150

CVE-2026-53150 affects the Linux kernel's thunderbolt validation path. The issue lies in tb_property_entry_valid() accepting zero-length entries for DIRECTORY, DATA, and TEXT types, allowing a zero-length TEXT entry to pass validation but trigger an underflow in the null-termination logic: proper...

EUVD-2026-39241

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tbpropertyentryvalid accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the...