CVE-2026-97508

thunderbolt: Set tb->root_switch to NULL when domain is stopped

State: Published
Severity: 7.5 High
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Set tb->root_switch to NULL when domain is stopped

Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep the uuid alive so that we can reply until the whole domain is released.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d1ff70241a275133e1a0258b7c23588b122276c8 to before d9a638e7bc87e0e6fe3a75517ac481e72fc0058cAffected d1ff70241a275133e1a0258b7c23588b122276c8 to before 66b0fe27e277713c2b9f3c452c76330ed0bd7eafAffected d1ff70241a275133e1a0258b7c23588b122276c8 to before 54ad3415cc211ca0d64ae1bf3234d6eb5c6aedd0Affected d1ff70241a275133e1a0258b7c23588b122276c8 to before 83d1af5b1b6e6c96ffa633ca2c9a77f6f4c93efaAffected d1ff70241a275133e1a0258b7c23588b122276c8 to before f06e9fbae78a51832211b4495a19412c7d49ecb4Affected d1ff70241a275133e1a0258b7c23588b122276c8 to before 99f019d2e9eb79adc485fef8aa8ada2cd0c843e9Affected d1ff70241a275133e1a0258b7c23588b122276c8 to before e56249d8a68e712f3b60e1f3fdbb5b4fea146468Affected
LinuxLinux	4.15Affected before 4.15Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

d1ff70241a275133e1a0258b7c23588b122276c8 to before d9a638e7bc87e0e6fe3a75517ac481e72fc0058cAffected
d1ff70241a275133e1a0258b7c23588b122276c8 to before 66b0fe27e277713c2b9f3c452c76330ed0bd7eafAffected
d1ff70241a275133e1a0258b7c23588b122276c8 to before 54ad3415cc211ca0d64ae1bf3234d6eb5c6aedd0Affected
d1ff70241a275133e1a0258b7c23588b122276c8 to before 83d1af5b1b6e6c96ffa633ca2c9a77f6f4c93efaAffected
d1ff70241a275133e1a0258b7c23588b122276c8 to before f06e9fbae78a51832211b4495a19412c7d49ecb4Affected
d1ff70241a275133e1a0258b7c23588b122276c8 to before 99f019d2e9eb79adc485fef8aa8ada2cd0c843e9Affected
d1ff70241a275133e1a0258b7c23588b122276c8 to before e56249d8a68e712f3b60e1f3fdbb5b4fea146468Affected

LinuxLinux

4.15Affected
before 4.15Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.