The vulnerability in the Linux kernel's Thunderbolt networking subsystem involved improper release of the Rx HopID resource. Specifically, tb_xdomain_alloc_in_hopid() passes a desired HopID to an allocator that returns the next free ID if the requested one is taken. The function tbnet_connected_work() treats any ID other than the peer's transmit path ID as a failure but did not release the allocated ID in that failure case, causing the allocation to remain live without a reference. The fix ensures that the allocated ID is released when it is not the expected one, preventing resource leakage.

The vulnerability could lead to resource leakage within the Thunderbolt networking code of the Linux kernel during XDomain connections. This may degrade system stability or performance over time due to unreleased resource allocations. There is no indication of direct code execution, privilege escalation, or data exposure from the provided information.

A fix has been implemented in the Linux kernel to release the Rx HopID resource properly when it is not the expected one. Users should apply the official Linux kernel updates that include this fix. Since no vendor advisory or patch link is provided, check the Linux kernel mailing lists or official repositories for the patch and update accordingly.