Memory Leak Vulnerability in Linux Kernel Affecting Thunderbolt Functionality

CVE-2026-97510

What is CVE-2026-97510?

A vulnerability exists within the Linux kernel's Thunderbolt implementation where failure in handling the tb_cfg_request() can result in memory not being properly released, potentially leading to a memory leak. If the request setup fails, the callback is not invoked, which may leave certain allocated memory blocks unfreed. To mitigate this issue and prevent resource leakage, it is crucial to implement the tb_cfg_request_put() function to ensure that memory is correctly released even when an error occurs during request processing.

References