CVE-2026-74585

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Thunderbolt subsystem where the tb drom parse entry port() function fails to validate the dual link port nr field read from the Device ROM (DROM). While the header->index is checked against sw->config.max port number, the dual link port nr variable is used to index the sw->ports[] array without similar validation. A malformed or malicious Thunderbolt device could provide a value for dual link port nr that exceeds the allocated array size, resulting in an out-of-bounds tb port pointer being stored and subsequently dereferenced.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.