CVE-2026-97510 Linux CVE debrief

Who should care

Linux kernel maintainers, users, and administrators should assess exposure and verify applicable versions. Affected operator, platform, vulnerability-management, and security-team impact should be considered. This includes reviewing compensating controls for exposed systems while remediation is scheduled and verified.

Why it matters

A memory leak vulnerability in the Linux kernel's thunderbolt subsystem requires assessment and potential patching for Linux kernel maintainers and users.

• Memory leak due to unreleased request when tb_cfg_request() fails.
• Potential system instability or resource exhaustion if exploited.
• Verification of Linux kernel versions and configurations is necessary.
• Patching or updating Linux kernel versions may be required.

Technical summary

The Linux kernel's thunderbolt subsystem has a vulnerability involving a memory leak when tb_cfg_request() fails in __tb_xdomain_response(). If the request setup fails, for instance due to a shut-down control channel, tb_cfg_request() returns an error without invoking the callback. To prevent memory leaks, tb_cfg_request_put() should be called upon failure of tb_cfg_request(). This vulnerability requires assessment and potential patching for Linux kernel maintainers and users. The affected product context and defensive impact should be considered.

Defensive priority

Linux kernel maintainers and users should assess exposure and verify applicable versions.

Recommended defensive actions

• Review Linux kernel versions and configurations for exposure.
• Verify tb_cfg_request() and __tb_xdomain_response() implementations.
• Apply patches or updates if available.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. Three source references from the Linux kernel Git repository are available. The vulnerability involves a memory leak when tb_cfg_request() fails in __tb_xdomain_response(). Linux kernel maintainers and users should verify applicable versions and configurations. The CVE Program and NVD provide official records and source-specific vulnerability assessments.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.