CVE-2026-63893

A flaw was found in the Linux kernel's Thunderbolt property handling. A remote attacker, by acting as a malicious XDomain peer, could craft a special property entry that causes an integer overflow when calculating memory access. This overflow allows the system to read memory outside of the intended buffer, leading to information disclosure through device name or vendor name system attributes. This vulnerability could expose sensitive, untargeted data.

This vulnerability is rated as Moderate severity for Red Hat products because successful exploitation requires an attacker to physically connect a malicious Thunderbolt device acting as an untrusted XDomain peer. The flaw allows adjacent physical attackers to trigger an out-of-bounds memory read, potentially exposing untargeted kernel memory contents through sysfs device properties rather than granting privilege escalation or arbitrary execution. Additionally, supported Red Hat Enterprise Linux kernels are not affected as they do not include the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.