Use-After-Free Vulnerability in Linux Kernel Thunderbolt Component

CVE-2026-74575

What is CVE-2026-74575?

A vulnerability in the Linux kernel's Thunderbolt component has been identified where delayed work can be executed on a freed object, leading to potential system instability or exploitation. This occurs in scenarios where state changes are handled by tb_xdp_handle_request() running out of the expected sequence. The lack of proper serialization between request handling and device removal can result in unwanted behavior when the queued work attempts to operate on an unallocated memory space. The solution involves leveraging mutual exclusion through locking mechanisms to ensure the integrity of object states during request processing and device unregistration.

References