CVE-2026-53147

A flaw was found in the Linux kernel's Thunderbolt component. A remote attacker could exploit this vulnerability by sending a malformed XDomain packet. This could lead to an out-of-bounds read, potentially resulting in information disclosure or system instability.

This vulnerability is rated as Moderate impact because exploitation requires adjacent physical access via a connected Thunderbolt peer, limiting the blast radius to directly linked devices. A maliciously crafted packet transmitted across the Thunderbolt link can cause an out-of-bounds memory read, potentially inducing a system crash or leaking uninitialized kernel memory. Supported Red Hat Enterprise Linux releases are not affected as the vulnerable code is not present in shipped kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.