{"id":"CVE-2026-97508","summary":"thunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Set tb-\u003eroot_switch to NULL when domain is stopped\n\nSimilarly what we do with the firmware connection manager. This makes\ntb_xdp_handle_request() return error to the remote host. However, we\nneed to make sure we keep the uuid alive so that we can reply until the\nwhole domain is released.","modified":"2026-10-22T10:35:03.404511967Z","published":"2026-09-24T16:04:58.740Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97508.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/54ad3415cc211ca0d64ae1bf3234d6eb5c6aedd0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/66b0fe27e277713c2b9f3c452c76330ed0bd7eaf"},{"type":"WEB","url":"https://git.kernel.org/stable/c/83d1af5b1b6e6c96ffa633ca2c9a77f6f4c93efa"},{"type":"WEB","url":"https://git.kernel.org/stable/c/99f019d2e9eb79adc485fef8aa8ada2cd0c843e9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d9a638e7bc87e0e6fe3a75517ac481e72fc0058c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e56249d8a68e712f3b60e1f3fdbb5b4fea146468"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f06e9fbae78a51832211b4495a19412c7d49ecb4"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97508.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97508"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d1ff70241a275133e1a0258b7c23588b122276c8"},{"fixed":"d9a638e7bc87e0e6fe3a75517ac481e72fc0058c"},{"fixed":"66b0fe27e277713c2b9f3c452c76330ed0bd7eaf"},{"fixed":"54ad3415cc211ca0d64ae1bf3234d6eb5c6aedd0"},{"fixed":"83d1af5b1b6e6c96ffa633ca2c9a77f6f4c93efa"},{"fixed":"f06e9fbae78a51832211b4495a19412c7d49ecb4"},{"fixed":"99f019d2e9eb79adc485fef8aa8ada2cd0c843e9"},{"fixed":"e56249d8a68e712f3b60e1f3fdbb5b4fea146468"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97508.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"5.10.271"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.222"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.189"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.158"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.111"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.53"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97508.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}