The Linux kernel thunderbolt network driver had a flaw where failure paths in tbnet_connected_work() did not clear the login_sent flag, causing the connection to appear established incorrectly. This caused tbnet_tear_down() to repeat teardown operations on already stopped rings, triggering dev_WARN() messages and potentially fatal errors under panic_on_warn. Additionally, it released a transmit path resource incorrectly on a HopID mismatch path, potentially freeing resources still in use by others. The patch clears login_sent on failure paths to prevent repeated teardown and stale connection states. The peer's next login request now triggers a fresh login attempt rather than retrying stale state.

The vulnerability could cause kernel warnings or fatal errors under panic_on_warn due to repeated teardown attempts on already stopped rings. It also risks improper release of transmit path resources, potentially leading to resource corruption or instability. This affects system stability and reliability but does not describe direct remote code execution or privilege escalation. No known exploits in the wild have been reported.

A fix has been applied to the Linux kernel to clear the login_sent flag on failure paths in tbnet_connected_work(), preventing repeated teardown and stale connection states. Users should update to the fixed kernel version once available. No additional mitigation is described or required beyond applying the official fix.