CVE-2026-53147

Description

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tb_xdp_handle_request() casts the received packet buffer to protocol-specific structs without verifying that the allocation is large enough for the target type. A peer can send a minimal XDomain packet that passes the generic header length check but is shorter than the struct accessed after the cast, causing out-of- bounds reads from the kmemdup allocation. Plumb the packet length through xdomain_request_work and validate it against the expected struct size before each cast.

CVSS v3.1 Score

8.1

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS — Exploit Prediction

0.0028

Probability of exploitation

0.20%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/07cd2787cdf8942d24a1a3ef81aa89b526fb6381 https://git.kernel.org/stable/c/0dd61ba03d05187726ecdf9c0e2175a81b9b24f6 https://git.kernel.org/stable/c/46da5c3ea011e884028a91cf913db093920a915b https://git.kernel.org/stable/c/79235c8add5da4bf27a12f5a5dbb579f300c059e https://git.kernel.org/stable/c/a504b9f2797b739e0304d537e8aa4ce883ecce39 https://git.kernel.org/stable/c/a770e62923090d7572f1f5a8507ae551d354a057

Frequently Asked Questions

What is CVE-2026-53147? +

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size before type cast tb_xdp_handle_request() casts the received packet buffer to protocol-specific structs without verifying that the allocation is large enough for the target type. A peer can send a minimal XDomain packet that passes the generic header length check but is shorter than the struct accessed after the cast, causing out-of- bounds reads from the kmemdup allocation. Plumb the packet length through xdomain_request_work and validate it against the expected struct size before each cast. It has a CVSS v3.1 base score of 8.1 (HIGH).

How severe is CVE-2026-53147? +

CVE-2026-53147 has a CVSS v3.1 score of 8.1 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0028, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-53147? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.