GHSA-G6C9-VF65-GGGG高危未审查

无摘要

OSV 1.4.0 · unreviewed · 修改于 2026-09-04 14:31

发布时间

2026-09-03 23:32

GitHub 审查时间

—

NVD 发布时间

2026-09-03 21:06

源文件

advisories/unreviewed/2026/09/GHSA-g6c9-vf65-gggg/GHSA-g6c9-vf65-gggg.json

公告说明

In the Linux kernel, the following vulnerability has been resolved:

thunderbolt: Fix bandwidth group reservation indexing

Valid bandwidth group IDs range from 1 through MAX_GROUPS, while Group ID 0 is reserved. tb_consumed_dp_bandwidth() uses the Group ID directly to index its local group_reserved[] array.

The array currently has MAX_GROUPS entries, so its valid indices are 0 through MAX_GROUPS - 1. Group ID MAX_GROUPS therefore accesses one element past the end, and the final group's reserved bandwidth is not included when the array is summed.

Give group_reserved[] MAX_GROUPS + 1 entries so direct Group ID indexing covers the reserved ID 0 and valid IDs 1 through MAX_GROUPS.

受影响的软件包

该公告没有提供结构化的受影响软件包信息。

参考链接

ADVISORY

标识信息

别名 / CVE

CVE-2026-80736

CWE

无

软件生态

无

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

原始 OSV JSON

{
  "id": "GHSA-g6c9-vf65-gggg",
  "aliases": [
    "CVE-2026-80736"
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Fix bandwidth group reservation indexing\n\nValid bandwidth group IDs range from 1 through MAX_GROUPS, while Group\nID 0 is reserved. tb_consumed_dp_bandwidth() uses the Group ID directly\nto index its local group_reserved[] array.\n\nThe array currently has MAX_GROUPS entries, so its valid indices are 0\nthrough MAX_GROUPS - 1. Group ID MAX_GROUPS therefore accesses one\nelement past the end, and the final group's reserved bandwidth is not\nincluded when the array is summed.\n\nGive group_reserved[] MAX_GROUPS + 1 entries so direct Group ID\nindexing covers the reserved ID 0 and valid IDs 1 through MAX_GROUPS.",
  "affected": [],
  "modified": "2026-09-04T06:31:20Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
    }
  ],
  "published": "2026-09-03T15:32:15Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80736",
      "type": "ADVISORY"
    },
    {
      "url": "https://git.kernel.org/stable/c/0a8c9ed4f166216642a8c084f0de415169c88088",
      "type": "WEB"
    },
    {
      "url": "https://git.kernel.org/stable/c/0bfb67ba366cd68d1d0ad935760577bae1d5df27",
      "type": "WEB"
    },
    {
      "url": "https://git.kernel.org/stable/c/9977321835c7ae71d12a43bed7baa5bd514d01c3",
      "type": "WEB"
    },
    {
      "url": "https://git.kernel.org/stable/c/d2ee4d47aacbd2ba456092eeec670dba35fde291",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": false,
    "nvd_published_at": "2026-09-03T13:06:12Z",
    "github_reviewed_at": null
  }
}