CVE-2026-53148

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the thunderbolt component where the tb xdp properties request() function derives the per-packet copy length from the response header without verifying if it fits within the previously allocated data buffer. A malicious peer can manipulate the length field to be larger than the declared data length, leading to a memory corruption where memcpy writes beyond the kcalloc allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.