CVE-2026-97508

Received Received - Intake

Thunderbolt Domain Stop Null Pointer in Linux Kernel

Publication date: 2026-09-24

Last updated on: 2026-10-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep the uuid alive so that we can reply until the whole domain is released.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-10-03

Generated

2026-10-15

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-13

NVD

CVE-2026-97508

EUVD

EUVD-2026-86106

Affected Vendors & Products

Vendor	Product	Version / Range
linux	kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability in the Thunderbolt subsystem. When a Thunderbolt domain is stopped, the root switch pointer is not properly cleared, which can lead to incorrect handling of requests. Specifically, tb_xdp_handle_request() may fail to return an error to the remote host correctly. The UUID must be retained until the entire domain is released to ensure proper responses.

Detection Guidance

This vulnerability is specific to the Linux kernel's Thunderbolt subsystem. Detection involves checking kernel logs for Thunderbolt-related errors or examining the status of Thunderbolt domains. Commands like dmesg | grep thunderbolt or ls /sys/bus/thunderbolt/devices may help identify issues.

Impact Analysis

This vulnerability could allow remote hosts to send requests that are not properly rejected due to incorrect error handling. This might lead to unexpected behavior or potential denial-of-service conditions in systems using Thunderbolt devices. Users with Thunderbolt-connected peripherals could experience instability or security issues.

Compliance Impact

This vulnerability does not provide sufficient information to determine its impact on compliance with standards like GDPR or HIPAA. The description focuses on a Linux kernel issue related to Thunderbolt domain handling, which may affect data integrity or confidentiality but lacks details on regulatory implications.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this Thunderbolt vulnerability. If immediate updates are not possible, consider disabling Thunderbolt functionality temporarily until the patch is applied.

Hi! I’m here to help you understand CVE-2026-97508. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70