CVE-2026-63892

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the thunderbolt property handling where the tb property parse dir() function fails to properly validate the dir len value derived from entry->length. When dir len is less than 4, two out-of-bounds conditions occur. First, a memory copy operation using kmemdup() can read beyond the property block boundaries if the dir offset is near the end of the block. Second, a size t underflow occurs when calculating content len (dir len - 4), resulting in an extremely large value that causes subsequent entry iterations to access memory out-of-bounds, potentially leading to a kernel oops.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.