{"id":"CVE-2026-97508","revision":"76fc0d8b70b144b9a34890a96649bc3f","records":[{"revision":"76fc0d8b70b144b9a34890a96649bc3f","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-97508","aliases":[],"title":"thunderbolt: Set tb->root_switch to NULL when domain is stopped","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Set tb->root_switch to NULL when domain is stopped\n\nSimilarly what we do with the firmware connection manager. This makes\ntb_xdp_handle_request() return error to the remote host. However, we\nneed to make sure we keep the uuid alive so that we can reply until the\nwhole domain is released.","state":0,"publishedAt":"2026-09-24T16:04:58.74+00:00","modifiedAt":"2026-10-03T10:59:06.059+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/thunderbolt/tb.c\",\n                        \"drivers/thunderbolt/xdomain.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"d1ff70241a275133e1a0258b7c23588b122276c8\",\n                            \"lessThan\": \"d9a638e7bc87e0e6fe3a75517ac481e72fc0058c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d1ff70241a275133e1a0258b7c23588b122276c8\",\n                            \"lessThan\": \"66b0fe27e277713c2b9f3c452c76330ed0bd7eaf\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d1ff70241a275133e1a0258b7c23588b122276c8\",\n                            \"lessThan\": \"54ad3415cc211ca0d64ae1bf3234d6eb5c6aedd0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d1ff70241a275133e1a0258b7c23588b122276c8\",\n                            \"lessThan\": \"83d1af5b1b6e6c96ffa633ca2c9a77f6f4c93efa\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d1ff70241a275133e1a0258b7c23588b122276c8\",\n                            \"lessThan\": \"f06e9fbae78a51832211b4495a19412c7d49ecb4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d1ff70241a275133e1a0258b7c23588b122276c8\",\n                            \"lessThan\": \"99f019d2e9eb79adc485fef8aa8ada2cd0c843e9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d1ff70241a275133e1a0258b7c23588b122276c8\",\n                            \"lessThan\": \"e56249d8a68e712f3b60e1f3fdbb5b4fea146468\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/thunderbolt/tb.c\",\n                        \"drivers/thunderbolt/xdomain.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.15\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.15\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.271\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.222\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.111\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.53\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","score":7.5,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/d9a638e7bc87e0e6fe3a75517ac481e72fc0058c","https://git.kernel.org/stable/c/66b0fe27e277713c2b9f3c452c76330ed0bd7eaf","https://git.kernel.org/stable/c/54ad3415cc211ca0d64ae1bf3234d6eb5c6aedd0","https://git.kernel.org/stable/c/83d1af5b1b6e6c96ffa633ca2c9a77f6f4c93efa","https://git.kernel.org/stable/c/f06e9fbae78a51832211b4495a19412c7d49ecb4","https://git.kernel.org/stable/c/99f019d2e9eb79adc485fef8aa8ada2cd0c843e9","https://git.kernel.org/stable/c/e56249d8a68e712f3b60e1f3fdbb5b4fea146468"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-97508","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-97508","identifiers":["CVE-2026-97508"]},"retained":false,"historicalAffected":[]}],"coverage":[]}