CVE-2026-97509
High
Description
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tb_service_release() and the ID array is owned by the parent XDomain.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux
PublishedSep 24, 2026
First seenSep 24, 2026
How to fix
Update
- Linux Linuxa4567e5380e4e46d0ea9a28d2d675e5c6f013d54, daeaa6c7211d03ed061b0dd22a875fad9372b090, cca72fe513f3d6b1279fe83483f8a8990adbe0c6, 57359bb31526c2f1bb0a7b9b69d8b8a6bd3f0e9f, 8ab12d015884b8aa85ea7ed58c5a0bae4264fe60, ea60ae6233ca0fc0d414e9c11f0d86c63b303fc7, 8b4060998637f06975fceee9b73845d8672d411e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | d1ff70241a275133e1a0258b7c23588b122276c8 ≤ v < a4567e5380e4e46d0ea9a28d2d675e5c6f013d54, d1ff70241a275133e1a0258b7c23588b122276c8 ≤ v < daeaa6c7211d03ed061b0dd22a875fad9372b090, d1ff70241a275133e1a0258b7c23588b122276c8 ≤ v < cca72fe513f3d6b1279fe83483f8a8990adbe0c6, d1ff70241a275133e1a0258b7c23588b122276c8 ≤ v < 57359bb31526c2f1bb0a7b9b69d8b8a6bd3f0e9f, d1ff70241a275133e1a0258b7c23588b122276c8 ≤ v < 8ab12d015884b8aa85ea7ed58c5a0bae4264fe60, d1ff70241a275133e1a0258b7c23588b122276c8 ≤ v < ea60ae6233ca0fc0d414e9c11f0d86c63b303fc7, d1ff70241a275133e1a0258b7c23588b122276c8 ≤ v < 8b4060998637f06975fceee9b73845d8672d411e, 4.15 | a4567e5380e4e46d0ea9a28d2d675e5c6f013d54, daeaa6c7211d03ed061b0dd22a875fad9372b090, cca72fe513f3d6b1279fe83483f8a8990adbe0c6, 57359bb31526c2f1bb0a7b9b69d8b8a6bd3f0e9f, 8ab12d015884b8aa85ea7ed58c5a0bae4264fe60, ea60ae6233ca0fc0d414e9c11f0d86c63b303fc7, 8b4060998637f06975fceee9b73845d8672d411e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.