CVE-2026-97509

Summary

This vulnerability in the Linux kernel allows an attacker to maintain a reference to a service ID during the lifetime of a Thunderbolt service, potentially leading to unauthorized access or manipulation of services.

Exploitability

Exploitation requires access to the Thunderbolt service and knowledge of the service ID, making it moderately difficult. Precondition is the presence of the Thunderbolt service and the ability to manipulate its lifecycle.

Blast radius

If exploited, the impact could be high, potentially leading to service disruption or unauthorized access to critical services.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the latest version of the affected Linux kernel, specifically version 5.19.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.