https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T13:08:03.604555+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-98896 fkie_cve-2026-98896 2026-10-25T13:08:03.623781+00:00

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Keep the domain reference while processing hotplug

We process hotplug events in a workqueue that may run after the domain has been removed by tb_domain_remove(). For example if user unloads the driver while at the same time plugging a device router we may have scheduled tb_handle_hotplug() to run. Avoid possible UAF in this case by taking the domain reference before scheduling the hotplug handler in tb_queue_hotplug().

 https://db.gcve.eu/vuln/ghsa-vrr8-45r3-5hwq GHSA-vrr8-45r3-5hwq 2026-10-25T13:08:03.623877+00:00

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Keep the domain reference while processing hotplug

We process hotplug events in a workqueue that may run after the domain has been removed by tb_domain_remove(). For example if user unloads the driver while at the same time plugging a device router we may have scheduled tb_handle_hotplug() to run. Avoid possible UAF in this case by taking the domain reference before scheduling the hotplug handler in tb_queue_hotplug().

 https://db.gcve.eu/vuln/msrc_cve-2026-98896 msrc_CVE-2026-98896 — thunderbolt: Keep the domain reference while processing hotplug 2026-10-25T13:08:03.623916+00:00 msrc_CVE-2026-98896