CVE-2026-53149
Beschrijving NL
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Bound root directory content to block size
__tb_property_parse_dir() does not check that content_offset +
content_len fits within block_len for the root directory case. When rootdir->length equals or exceeds block_len - 2, the entry
loop reads past the allocated property block. Add a bounds check after computing content_offset and content_len
to reject directories whose content extends past the block.
Origineel (Engels) tonen
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Bound root directory content to block size
__tb_property_parse_dir() does not check that content_offset +
content_len fits within block_len for the root directory case.
When rootdir->length equals or exceeds block_len - 2, the entry
loop reads past the allocated property block.
Add a bounds check after computing content_offset and content_len
to reject directories whose content extends past the block.