Linux Kernel Vulnerability in Thunderbolt DMA Path Management

CVE-2026-74691

What is CVE-2026-74691?

A vulnerability in the Linux kernel affects the management of DMA paths in Thunderbolt devices, particularly during the teardown process. The current sequencing of stopping rings and deactivating paths can lead to a situation where the driver fails to properly handle data being transmitted. The teardown sequence does not align with the earlier established setup sequence. This misalignment causes the pending status of the hops not to clear, resulting in timeout errors that can impede network functionality. While it is crucial to deactivate paths before stopping the rings to ensure successful data transfer management, continued failures in the current setup can damage device performance and reliability.

References