CVE-2026-80736
Description
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexing Valid bandwidth group IDs range from 1 through MAX_GROUPS, while Group ID 0 is reserved. tb_consumed_dp_bandwidth() uses the Group ID directly to index its local group_reserved[] array. The array currently has MAX_GROUPS entries, so its valid indices are 0 through MAX_GROUPS - 1. Group ID MAX_GROUPS therefore accesses one element past the end, and the final group's reserved bandwidth is not included when the array is summed. Give group_reserved[] MAX_GROUPS + 1 entries so direct Group ID indexing covers the reserved ID 0 and valid IDs 1 through MAX_GROUPS.
How to fix
- Linux Linux0bfb67ba366cd68d1d0ad935760577bae1d5df27, 9977321835c7ae71d12a43bed7baa5bd514d01c3, 0a8c9ed4f166216642a8c084f0de415169c88088, d2ee4d47aacbd2ba456092eeec670dba35fde291 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 52a4490e89d7c4effe613d8dffd2ac0a2a786bd7 ≤ v < 0bfb67ba366cd68d1d0ad935760577bae1d5df27, 52a4490e89d7c4effe613d8dffd2ac0a2a786bd7 ≤ v < 9977321835c7ae71d12a43bed7baa5bd514d01c3, 52a4490e89d7c4effe613d8dffd2ac0a2a786bd7 ≤ v < 0a8c9ed4f166216642a8c084f0de415169c88088, 52a4490e89d7c4effe613d8dffd2ac0a2a786bd7 ≤ v < d2ee4d47aacbd2ba456092eeec670dba35fde291, 6.9 | 0bfb67ba366cd68d1d0ad935760577bae1d5df27, 9977321835c7ae71d12a43bed7baa5bd514d01c3, 0a8c9ed4f166216642a8c084f0de415169c88088, d2ee4d47aacbd2ba456092eeec670dba35fde291 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.