{"schema_version":"1.7.5","id":"CVE-2026-53150","published":"2026-06-25T08:38:35.531Z","modified":"2026-07-22T18:14:42.675829859Z","related":["CGA-cf23-gqqp-j976","SUSE-SU-2026:2914-1","SUSE-SU-2026:3130-1","SUSE-SU-2026:3166-1"],"summary":"thunderbolt: Reject zero-length property entries in validator","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Reject zero-length property entries in validator\n\ntb_property_entry_valid() accepts entries with length == 0 for\nDIRECTORY, DATA, and TEXT types.  A zero-length TEXT entry passes\nvalidation but causes an underflow in the null-termination logic:\n\n  property->value.text[property->length * 4 - 1] = '\\0';\n\nWhen property->length is 0 this writes to offset -1 relative to\nthe allocation.\n\nReject zero-length entries early in the validator since they have no\nvalid representation in the XDomain property protocol.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"cdae7c07e3e3509eaabc18c1640a55dc5b99c179"},{"fixed":"581c2053ab4dbe27e83c9e62deb4c73aa8dc0c3a"},{"fixed":"35d6c9252a152e756768a26dbf216b9dd9dd8e92"},{"fixed":"99d9dbad1463afb510d42c9714f846361d1b726d"},{"fixed":"5f56bc6bddffe8710ba0ba8844023b5a44ca90e4"},{"fixed":"ca11e7da4fba4b394f69e16448f4463c44c84de6"},{"fixed":"2e0ddac549ebd713eb9f4a15b6496e3440a17d8b"},{"fixed":"3b6e68cb97f725385010264a873e14a3921b6b8a"},{"fixed":"cff8eb65d1eafe7793e54b4d0cf6bf831644630b"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53150.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"5.10.259"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.210"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.176"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.143"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.94"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.36"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.13"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53150.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/2e0ddac549ebd713eb9f4a15b6496e3440a17d8b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/35d6c9252a152e756768a26dbf216b9dd9dd8e92"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3b6e68cb97f725385010264a873e14a3921b6b8a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/581c2053ab4dbe27e83c9e62deb4c73aa8dc0c3a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5f56bc6bddffe8710ba0ba8844023b5a44ca90e4"},{"type":"WEB","url":"https://git.kernel.org/stable/c/99d9dbad1463afb510d42c9714f846361d1b726d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/ca11e7da4fba4b394f69e16448f4463c44c84de6"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cff8eb65d1eafe7793e54b4d0cf6bf831644630b"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53150.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53150"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53150.json"}}