CVE-2026-53150

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the thunderbolt component where the tb property entry valid() function accepts entries with a length of 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but triggers an underflow in the null-termination logic when calculating the position for the null character using the property->length variable. This results in a write operation at offset -1 relative to the memory allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.