VYPR
Unrated severityNVD Advisory· Published Jun 26, 2026

Debian linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt…

CVE-2026-53150

Description

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.

Affected products

1

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.

CVE-2026-53150 · VYPR