What happened
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Set tb->root_switch to NULL when domain is stopped Similarly what we do with the firmware connection manager. This makes tb_xdp_handle_request() return error to the remote host. However, we need to make sure we keep the uuid alive so that we can reply until the whole domain is released.
Affected versions
Linux: d1ff70241a275133e1a0258b7c23588b122276c8 through before f06e9fbae78a51832211b4495a19412c7d49ecb4 (git); d1ff70241a275133e1a0258b7c23588b122276c8 through before 99f019d2e9eb79adc485fef8aa8ada2cd0c843e9 (git); d1ff70241a275133e1a0258b7c23588b122276c8 through before e56249d8a68e712f3b60e1f3fdbb5b4fea146468 (git); 4.15 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.