CVE-2026-53149 | Linux Kernel up to 7.0.12 thunderbolt __tb_property_parse_dir length infinite loop

A vulnerability labeled as critical has been found in Linux Kernel up to 7.0.12. This impacts the function __tb_property_parse_dir of the component thunderbolt. Such manipulation of the argument length leads to infinite loop.

This vulnerability is uniquely identified as CVE-2026-53149. The attack can only be initiated within the local network. No exploit exists.

The affected component should be upgraded.