https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:11:34 +0000 https://cve.radiocsirt.org/vuln/cve-2026-80990 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: thunderbolt: Release the Rx HopID that was handed out on mismatch</p> <p>tb_xdomain_alloc_in_hopid() passes the wanted HopID to ida_alloc_range() as the lower bound, so a taken id is not an error there: the allocator returns the next free one above it. tbnet_connected_work() asks for the peer&#39;s transmit path, treats any other id as a failure and returns without releasing what it got, so that allocation stays live for the rest of the XDomain connection with nothing left holding a reference to it.</p> <p>Release the id when it is not the one we asked for, the same way the error unwind at the end of the function releases the expected one.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: thunderbolt: Release the Rx HopID that was handed out on mismatch</p> <p>tb_xdomain_alloc_in_hopid() passes the wanted HopID to ida_alloc_range() as the lower bound, so a taken id is not an error there: the allocator returns the next free one above it. tbnet_connected_work() asks for the peer&#39;s transmit path, treats any other id as a failure and returns without releasing what it got, so that allocation stays live for the rest of the XDomain connection with nothing left holding a reference to it.</p> <p>Release the id when it is not the one we asked for, the same way the error unwind at the end of the function releases the expected one.</p> https://cve.radiocsirt.org/vuln/cve-2026-80990