Unrated severityNVD Advisory· Published Jun 26, 2026
Debian linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt…
CVE-2026-53150
Description
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.
Affected products
1Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.