Cloudanix VulnDB

CVE-2026-97509

High · 8.8

CVSS

8.8

EPSS

0.2%

Published

Sep 24, 2026

CISA due date

—

The record

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tb_service_release() and the ID array is owned by the parent XDomain.

Affected packages

Ecosystem Package Introduced Fixed