In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Release request if tb cfg request() fails in tb xdomain response()

If tb cfg request() fails setting up the request (for example the control channel is shut down already) it returns an error without calling the callback. To avoid leaking that memory, call tb cfg request put() if tb cfg request() fails.