CVE-2026-97510

CVE-2026-97510

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()

If tb_cfg_request() fails setting up the request (for example the

control channel is shut down already) it returns an error without

calling the callback. To avoid leaking that memory, call

tb_cfg_request_put() if tb_cfg_request() fails.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00161 · 4.9th percentile
Published
2026-09-24T21:17Z
References (7)
https://git.kernel.org/stable/c/000189b249e45e63ee873d0c59c3be1805349681 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0325d017bf4354a015a02413ee1c7e51266cecf4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/42dddadf6b6131af4d12bfa8bdc84ef954e8cef8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/487ee7dbad21d1e757f5dd490ac182aebfa5f689 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4c63f29872cb444b33665348bbd2f45cab06afcd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9d6657674919bef57c8a7195170263f3456e9876 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dbc8a8dd7c1930043c473818fcadcf88cb5e1c4d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 16:05Z
    thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()
    cvelistv5