Live › vulnerability › CVE-2026-98896
Go to dashboardA race in the Linux kernel Thunderbolt driver lets a hotplug workqueue handler run after the domain was removed, when the driver is unloaded during a device plug event. The fix takes a domain reference before scheduling the handler, which prevents a use-after-free; the sources do not state the attacker impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
thunderbolt: Keep the domain reference while processing hotplug
We process hotplug events in a workqueue that may run after the domain has been removed by tb_domain_remove(). For example if user unloads the driver while at the same time plugging a device router we may have scheduled tb_handle_hotplug() to run. Avoid possible UAF in this case by taking the domain reference before scheduling the hotplug handler in tb_queue_hotplug().
This page as .md · .json · in your agent: get_signal("CVE-2026-98896")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.