VYPR
High severity7.5NVD Advisory· Published Sep 24, 2026· Updated Oct 3, 2026

CVE-2026-97508

CVE-2026-97508

Description

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Set tb->root_switch to NULL when domain is stopped

Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep the uuid alive so that we can reply until the whole domain is released.

Affected products

2

Patches

Vulnerability mechanics

References

7

News mentions

1