CVE-2026-97510

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-97510
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97510.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97510
Downstream
Published
2026-09-24T16:05:05Z
Modified
2026-10-05T02:30:49Z
Summary
thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()
Details

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response()

If tb_cfg_request() fails setting up the request (for example the control channel is shut down already) it returns an error without calling the callback. To avoid leaking that memory, call tb_cfg_request_put() if tb_cfg_request() fails.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97510.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d1ff70241a275133e1a0258b7c23588b122276c8
Fixed
dbc8a8dd7c1930043c473818fcadcf88cb5e1c4d
Fixed
487ee7dbad21d1e757f5dd490ac182aebfa5f689
Fixed
000189b249e45e63ee873d0c59c3be1805349681
Fixed
9d6657674919bef57c8a7195170263f3456e9876
Fixed
42dddadf6b6131af4d12bfa8bdc84ef954e8cef8
Fixed
0325d017bf4354a015a02413ee1c7e51266cecf4
Fixed
4c63f29872cb444b33665348bbd2f45cab06afcd

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97510.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97510.json"