CVE-2026-97509: thunderbolt: Keep XDomain reference during the lifetime of a service
Published Sep 24, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Keep XDomain reference during the lifetime of a service
This is needed because we release the service ID in tbservicerelease() and the ID array is owned by the parent XDomain.
Affected Software
1 affected component
Linux Linux kernel
Event History
Sep 24, 2026
CVE Published
via MITRE·04:05 PM
Data Sourced
via MITRE·04:05 PM
Description
Data Sourced
via NVD·05:17 PM
Description
Frequently Asked Questions
1
What component is affected by this issue?
The issue affects the Linux kernel Thunderbolt subsystem, specifically XDomain service lifetime handling.
2
What condition leads to the vulnerability?
A service can outlive the XDomain parent that owns its service-ID array. When the service is released, tb_service_release() releases its service ID through data owned by that parent.
3
What does the fix change?
The fix keeps a reference to the XDomain for the lifetime of the service, ensuring that the service-ID array remains valid until the service is released.