CVE-2026-53149

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the thunderbolt component where the tb property parse dir() function fails to verify if the sum of content offset and content len fits within the block len for the root directory. If rootdir->length is equal to or exceeds block len minus 2, the entry loop reads beyond the allocated property block, leading to an out-of-bounds read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.