CVE-2026-97508EPSS p12.0%
CVE-2026-97508CVE-2026-97508
Description
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Set tb->root_switch to NULL when domain is stopped
Similarly what we do with the firmware connection manager. This makes
tb_xdp_handle_request() return error to the remote host. However, we
need to make sure we keep the uuid alive so that we can reply until the
whole domain is released.
Scoring
| CVSS | 7.5 () |
| Vector | CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.22% probability of exploitation · percentile 12.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-10-03 |