CVE-2026-53146

A flaw was found in the Linux kernel's Thunderbolt subsystem. A malicious or compromised Thunderbolt/USB4 peer can send a specially crafted, short response. This causes the tb_xdomain_copy() function to read beyond the valid data in the received frame, potentially exposing stale contents from previous transactions. This out-of-bounds read primarily leads to information disclosure, with potential limited impact on data integrity or system availability.

This vulnerability is rated Moderate rather than Important because exploitation requires physical or adjacent connection of a malicious Thunderbolt or USB4 peer device to trigger XDomain response handling. The flaw results in an out-of-bounds read that only discloses stale memory buffer contents from earlier transactions, without enabling arbitrary code execution or privilege escalation. Furthermore, Thunderbolt inter-domain communication is uncommon in standard Red Hat Enterprise Linux server deployments, significantly limiting real-world exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.