SB20261022287 - Race condition in Linux kernel thunderbolt driver

Description

This security bulletin contains information about 1 vulnerability.

1) Race condition (CVE-ID: CVE-2026-98689)

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to potentially cause a denial of service through invalid kernel memory accesses.

The vulnerability exists due to a race condition in the Linux kernel Thunderbolt DisplayPort tunnel handling when DPRX capability reads are canceled during domain suspension or teardown. A local user can potentially trigger concurrent DPRX work and tunnel teardown to cause accesses to adapters or routers that are no longer available, which may crash the kernel.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2c2fd6a7fd5e1218db7e17336fc1a0393b6949e6
• https://git.kernel.org/stable/c/405a969c0b3356639116db89ab367be1d64b77c0
• https://git.kernel.org/stable/c/419fa32fa5bc2d7fb9d0d15d5630b1c1090808b3