CVE-2026-80736

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Fix bandwidth group reservation indexing

Valid bandwidth group IDs range from 1 through MAX GROUPS, while Group ID 0 is reserved. tb consumed dp bandwidth() uses the Group ID directly to index its local group reserved[] array.

The array currently has MAX GROUPS entries, so its valid indices are 0 through MAX GROUPS - 1. Group ID MAX GROUPS therefore accesses one element past the end, and the final group's reserved bandwidth is not included when the array is summed.

Give group reserved[] MAX GROUPS + 1 entries so direct Group ID indexing covers the reserved ID 0 and valid IDs 1 through MAX GROUPS.