AZL-90285
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-90285.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-90285
- Upstream
- Published
- 2026-06-25T09:16:32Z
- Modified
- 2026-08-28T17:47:53Z
- Summary
- CVE-2026-53149 affecting package kernel for versions less than 6.6.143.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Bound root directory content to block size
__tb_property_parse_dir() does not check that content_offset + content_len fits within block_len for the root directory case. When rootdir->length equals or exceeds block_len - 2, the entry loop reads past the allocated property block.
Add a bounds check after computing content_offset and content_len to reject directories whose content extends past the block.
- References