7.8

CVE-2026-80736

thunderbolt: Fix bandwidth group reservation indexing

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Fix bandwidth group reservation indexing

Valid bandwidth group IDs range from 1 through MAX_GROUPS, while Group
ID 0 is reserved. tb_consumed_dp_bandwidth() uses the Group ID directly
to index its local group_reserved[] array.

The array currently has MAX_GROUPS entries, so its valid indices are 0
through MAX_GROUPS - 1. Group ID MAX_GROUPS therefore accesses one
element past the end, and the final group's reserved bandwidth is not
included when the array is summed.

Give group_reserved[] MAX_GROUPS + 1 entries so direct Group ID
indexing covers the reserved ID 0 and valid IDs 1 through MAX_GROUPS.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 52a4490e89d7c4effe613d8dffd2ac0a2a786bd7
Version < 0bfb67ba366cd68d1d0ad935760577bae1d5df27
Status affected
Version 52a4490e89d7c4effe613d8dffd2ac0a2a786bd7
Version < 9977321835c7ae71d12a43bed7baa5bd514d01c3
Status affected
Version 52a4490e89d7c4effe613d8dffd2ac0a2a786bd7
Version < 0a8c9ed4f166216642a8c084f0de415169c88088
Status affected
Version 52a4490e89d7c4effe613d8dffd2ac0a2a786bd7
Version < d2ee4d47aacbd2ba456092eeec670dba35fde291
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.9
Status affected
Version 0
Version < 6.9
Status unaffected
Version <= 6.12.*
Version 6.12.104
Status unaffected
Version <= 6.18.*
Version 6.18.45
Status unaffected
Version <= 7.1.*
Version 7.1.9
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.058
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/0bfb67ba366cd68d1d0ad935760577bae1d5df27
https://git.kernel.org/stable/c/9977321835c7ae71d12a43bed7baa5bd514d01c3
https://git.kernel.org/stable/c/0a8c9ed4f166216642a8c084f0de415169c88088
https://git.kernel.org/stable/c/d2ee4d47aacbd2ba456092eeec670dba35fde291