In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Reject zero-length property entries in validator

tb_property_entry_valid() accepts entries with length == 0 for
DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes
validation but causes an underflow in the null-termination logic:

property->value.text[property->length * 4 - 1] = '\0';

When property->length is 0 this writes to offset -1 relative to
the allocation.

Reject zero-length entries early in the validator since they have no
valid representation in the XDomain property protocol.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00184.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
cdae7c07e3e3509eaabc18c1640a55dc5b99c179 affected < 581c2053ab4dbe27e83c9e62deb4c73aa8dc0c3a
cdae7c07e3e3509eaabc18c1640a55dc5b99c179 affected < 35d6c9252a152e756768a26dbf216b9dd9dd8e92
cdae7c07e3e3509eaabc18c1640a55dc5b99c179 affected < 99d9dbad1463afb510d42c9714f846361d1b726d
cdae7c07e3e3509eaabc18c1640a55dc5b99c179 affected < 5f56bc6bddffe8710ba0ba8844023b5a44ca90e4
cdae7c07e3e3509eaabc18c1640a55dc5b99c179 affected < ca11e7da4fba4b394f69e16448f4463c44c84de6
cdae7c07e3e3509eaabc18c1640a55dc5b99c179 affected < 2e0ddac549ebd713eb9f4a15b6496e3440a17d8b
cdae7c07e3e3509eaabc18c1640a55dc5b99c179 affected < 3b6e68cb97f725385010264a873e14a3921b6b8a
cdae7c07e3e3509eaabc18c1640a55dc5b99c179 affected < cff8eb65d1eafe7793e54b4d0cf6bf831644630b
Linux Linux affected
Version Status Constraints
4.15 affected —
0 unaffected < 4.15
5.10.259 unaffected ≤ 5.10.*
5.15.210 unaffected ≤ 5.15.*
6.1.176 unaffected ≤ 6.1.*
6.6.143 unaffected ≤ 6.6.*
6.12.94 unaffected ≤ 6.12.*
6.18.36 unaffected ≤ 6.18.*
7.0.13 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/2e0ddac549ebd713eb9f4a15b6496e3440a17d8b cve-icon
https://git.kernel.org/stable/c/35d6c9252a152e756768a26dbf216b9dd9dd8e92 cve-icon
https://git.kernel.org/stable/c/3b6e68cb97f725385010264a873e14a3921b6b8a cve-icon
https://git.kernel.org/stable/c/581c2053ab4dbe27e83c9e62deb4c73aa8dc0c3a cve-icon
https://git.kernel.org/stable/c/5f56bc6bddffe8710ba0ba8844023b5a44ca90e4 cve-icon
https://git.kernel.org/stable/c/99d9dbad1463afb510d42c9714f846361d1b726d cve-icon
https://git.kernel.org/stable/c/ca11e7da4fba4b394f69e16448f4463c44c84de6 cve-icon
https://git.kernel.org/stable/c/cff8eb65d1eafe7793e54b4d0cf6bf831644630b cve-icon
History

Thu, 25 Jun 2026 12:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-122

Thu, 25 Jun 2026 09:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.
Title thunderbolt: Reject zero-length property entries in validator
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-25T08:38:35.531Z

Reserved: 2026-06-09T07:44:35.387Z

Link: CVE-2026-53150

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-25T14:00:04Z

Weaknesses