{"id":41164,"date":"2026-10-19T00:32:25","date_gmt":"2026-10-18T16:32:25","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-98692"},"modified":"2026-10-19T00:32:25","modified_gmt":"2026-10-18T16:32:25","slug":"cve-2026-98692","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-98692","title":{"rendered":"CVE-2026-98692 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Make the"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>thunderbolt: Make the DP tunnel activation callback mandatory<\/p>\n<p>tb_tunnel_alloc_dp() takes an optional callback which is run from<br \/>\ndprx_work once the DPRX capabilities read has completed. Without that<br \/>\ncallback tb_dp_dprx_start() reads the capabilities synchronously and<br \/>\nnever queues the work. It however always takes a tunnel reference which<br \/>\nis only dropped by dprx_work itself or by tb_dp_dprx_stop() when<br \/>\ncancel_delayed_work() actually canceled that work. That reference is<br \/>\nthus leaked for every tunnel without a callback.<\/p>\n<p>The only tunnels without one are those from tb_tunnel_discover_dp(),<br \/>\nwhich are activated again when restoring from hibernation.<br \/>\nPass the callback to tb_tunnel_discover_dp() as well and drop the<br \/>\nsynchronous path such that the DPRX capabilities are always read from<br \/>\ndprx_work. Hibernation restore then also no longer blocks for up to 12<br \/>\nseconds while waiting for that read to complete.<\/p>\n<p>Also fix up the KUnit tests.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>thunderbolt: Make the DP tunnel activation callback mandatory<\/p>\n<p>tb_tunnel_alloc_dp() takes an optional callback which is run from<br \/>\ndp<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-41164","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/41164","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=41164"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=41164"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=41164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}