In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Limit XDomain response copy to actual frame size
tb_xdomain_copy() copies req->response_size bytes from the received packet buffer regardless of the actual frame size. When a short response arrives, this reads past the valid frame data in the DMA pool buffer into stale contents from previous transactions.
Use the minimum of frame size and expected response size for the copy length.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Ubuntu | — | Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.1-1061-realtimeUpgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-26.04aUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-146-fipsUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-6.8.0-1051-gkeopUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-azureUpgrade linux-image-azure-5.15Upgrade linux-image-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-198-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-7.0Upgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-7.0Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1064-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-6.8.0-146-lowlatencyUpgrade linux-image-azure-7.0Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1066-aws-fipsUpgrade linux-image-gke-64k-7.0Upgrade linux-image-6.8.0-1069-azure-fipsUpgrade linux-image-6.8.0-146-generic-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1066-ibmUpgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-nvidia-bosUpgrade linux-image-realtime-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-7.0Upgrade linux-image-aws-fipsUpgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-198-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-awsUpgrade linux-image-oem-26.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-6.8.0-1064-nvidiaUpgrade linux-image-5.15.0-1112-nvidiaUpgrade linux-image-6.8.0-1066-aws-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-oem-20.04Upgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-aws-7.0Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-146-lowlatency-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-realtime-7.0Upgrade linux-image-generic-5.15Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-virtualUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracleUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-5.15.0-1112-nvidia-lowlatencyUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-genericUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-6.8.0-1068-azure-fdeUpgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1063-oracle-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-fips-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1063-oracleUpgrade linux-image-6.8.0-1065-gke-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-7.0.0-1010-oemUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1070-gcpUpgrade linux-image-6.8.0-1066-awsUpgrade linux-image-6.8.0-1065-gkeUpgrade linux-image-5.15.0-1117-awsUpgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-7.0Upgrade linux-image-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-7.0Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1070-gcp-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1070-gcp-fipsUpgrade linux-image-6.8.0-1064-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-6.8.0-1070-azureUpgrade linux-image-6.8.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-26.04Upgrade linux-image-6.8.0-146-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-intelUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1123-azure | Aug 16, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub