Thunderbolt Service ID Reference Issue in Linux Kernel

CVE-2026-97509

What is CVE-2026-97509?

In the Linux kernel, a vulnerability exists in the Thunderbolt subsystem concerning the handling of service IDs. It occurs because the service ID is released prematurely during the execution of the tb_service_release() function while the ID array remains tied to its parent XDomain. This oversight can potentially lead to issues in service management and stability, highlighting the need for improved tracking of references throughout the service lifecycle.

References