net: thunderbolt: Fix frags[] overflow by bounding frame_count

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-72157 · Microsoft / collected KEV context

cve-program · CVE-2026-72157

• https://git.kernel.org/stable/c/f96b3b35c622d565eff2438993e028d280163f5c
• https://git.kernel.org/stable/c/6262f51e09d8dc8b07599a9e4f03bd3989d13fff
• https://git.kernel.org/stable/c/569ba39b2d12995a29dc158e5b4de6e449278f30
• https://git.kernel.org/stable/c/2b3b4e5ff5a58ad32817824b0310e63908b12052
• https://git.kernel.org/stable/c/e27beb4536cbf1d59e2d8c2840e87d972aba906f
• https://git.kernel.org/stable/c/e5824d5b841d99a2bcdd4e2c256643293bbc22c1
• https://git.kernel.org/stable/c/fe6b606fbf0c3beb94ccf17fcf31d8c2138264e3
• https://git.kernel.org/stable/c/55d9895f89970501fe126d1026b586b04a224c27

No related operational record is retained in the current change model.