The Linux kernel Thunderbolt driver contained a vulnerability (CVE-2026-53149) due to missing bounds checking in the __tb_property_parse_dir() function. When parsing the root directory, the function did not ensure that content_offset plus content_len remained within the allocated block length. If the root directory length was equal to or greater than block_len - 2, this caused an out-of-bounds read beyond the allocated property block. The fix involved adding a bounds check after calculating content_offset and content_len to prevent processing directories with content extending past the block boundary.

This vulnerability can lead to out-of-bounds memory reads in the Linux kernel's Thunderbolt driver, potentially causing denial of service (kernel crash) or exposing kernel memory contents. The CVSS vector indicates local attack vector with low complexity, requiring low privileges, no user interaction, and resulting in high confidentiality and availability impact but no integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or vendor advisories are provided, users should monitor official Linux kernel security advisories for updates addressing CVE-2026-53149 and apply patches once available.