Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-93h6-v44h-45xx

Опубликовано: 24 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Set tb->root_switch to NULL when domain is stopped

Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep the uuid alive so that we can reply until the whole domain is released.

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Set tb->root_switch to NULL when domain is stopped

Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep the uuid alive so that we can reply until the whole domain is released.

EPSS

Процентиль: 12%
0.00225
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
18 дней назад

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep the uuid alive so that we can reply until the whole domain is released.

CVSS3: 5.5
redhat
19 дней назад

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep the uuid alive so that we can reply until the whole domain is released.

CVSS3: 7.5
nvd
18 дней назад

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep the uuid alive so that we can reply until the whole domain is released.

CVSS3: 5.3
msrc
15 дней назад

thunderbolt: Set tb->root_switch to NULL when domain is stopped

CVSS3: 7.5
debian
18 дней назад

In the Linux kernel, the following vulnerability has been resolved: t ...

EPSS

Процентиль: 12%
0.00225
Низкий

7.5 High

CVSS3