In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Limit XDomain response copy to actual frame size
tb_xdomain_copy() copies req->response_size bytes from the received packet buffer regardless of the actual frame size. When a short response arrives, this reads past the valid frame data in the DMA pool buffer into stale contents from previous transactions.
Use the minimum of frame size and expected response size for the copy length.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 5, 2026 | Jul 5, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-gkeUpgrade linux-image-generic-7.0Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-raspi-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-aws-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-raspiUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-7.0.0-1012-awsUpgrade linux-image-oem-26.04aUpgrade linux-image-awsUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-azureUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-aws-64k-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-ibmUpgrade linux-image-generic-64k-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1010-oemUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-oracle-7.0Upgrade linux-image-virtual-7.0Upgrade linux-image-genericUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-26.04Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracleUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1013-ibm | Aug 16, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | Jun 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub