{"id":"AZL-110647","summary":"CVE-2026-98896 affecting package kernel 6.6.157.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Keep the domain reference while processing hotplug\n\nWe process hotplug events in a workqueue that may run after the domain\nhas been removed by tb_domain_remove(). For example if user unloads the\ndriver while at the same time plugging  a device router we may have\nscheduled tb_handle_hotplug() to run. Avoid possible UAF in this case by\ntaking the domain reference before scheduling the hotplug handler in\ntb_queue_hotplug().","modified":"2026-10-30T05:35:37Z","published":"2026-10-23T12:18:23Z","upstream":["CVE-2026-98896"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98896"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.157.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110647.json"}}],"schema_version":"1.9.2"}