CVE-2026-98689
Description
A flaw was found in the Linux kernel's Thunderbolt subsystem. A race condition occurs when DisplayPort (DP) read operations are canceled during system suspend or device disconnection, allowing work handlers to access tunnel structures that have already been torn down. A local attacker could trigger this timing window during power management transitions to cause a kernel crash, resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated as Moderate severity for Red Hat products because triggering the condition requires local unprivileged access on systems equipped with active Thunderbolt hardware, and the potential impact is restricted to a system denial of service. Standard enterprise server deployments rarely employ Thunderbolt controllers or DisplayPort tunneling peripherals, which minimizes practical exposure in common production environments. Exploitation additionally relies on winning a race condition during power management transitions such as system sleep or bus shutdown, posing no threat to data confidentiality or system integrity.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 4.7 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | High | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
