Device Leak in Intel Thunderbolt Driver for Linux Kernel

CVE-2026-23091

What is CVE-2026-23091?

A device leak was identified in the Intel Thunderbolt driver component of the Linux Kernel. This vulnerability arises during the output device's open() process, where references to the th device may not be adequately released, posing a potential risk of resource leakage. Although recent commits have addressed some error paths in the open() mechanism to fix this leak, certain scenarios still allow for references to persist, necessitating further attention to ensure complete mitigation and system stability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References