AZL-90692
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-90692.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-90692
- Upstream
- Published
- 2026-06-25T09:16:32Z
- Modified
- 2026-08-28T17:47:38Z
- Summary
- CVE-2026-53148 affecting package kernel for versions less than 6.6.143.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Clamp XDomain response data copy to allocation size
tb_xdp_properties_request() derives the per-packet copy length from the response header without checking that it fits in the previously allocated data buffer. A malicious peer can set its length field larger than the declared data_length, causing memcpy to write past the kcalloc allocation.
Clamp the per-packet copy length so that the cumulative offset never exceeds data_len.
- References