In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Mark XDomain as unplugged when router is removed
I noticed that when we do discrete host router NVM upgrade and it gets hot-removed from the PCIe side as a result of NVM firmware authentication, if there is another host connected with enabled paths we hang in tearing them down. This is due to fact that the Thunderbolt networking driver also tries to cleanup the paths and ends up blocking in tb_disconnect_xdomain_paths() waiting for the domain lock.
However, at this point we already cleaned the paths in tb_stop() so there is really no need for tb_disconnect_xdomain_paths() to do that anymore. Furthermore it already checks if the XDomain is unplugged and bails out early so take advantage of that and mark the XDomain as unplugged when we remove the parent router.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Dec 12, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Dec 12, 2024 | Sep 13, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 13, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade dtb-sprdUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-azure-baseUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dtb-amlogic | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-genericUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oem-20.04d | Nov 12, 2024 | Sep 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub