{"id":"CVE-2026-80736","summary":"thunderbolt: Fix bandwidth group reservation indexing","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nthunderbolt: Fix bandwidth group reservation indexing\n\nValid bandwidth group IDs range from 1 through MAX_GROUPS, while Group\nID 0 is reserved. tb_consumed_dp_bandwidth() uses the Group ID directly\nto index its local group_reserved[] array.\n\nThe array currently has MAX_GROUPS entries, so its valid indices are 0\nthrough MAX_GROUPS - 1. Group ID MAX_GROUPS therefore accesses one\nelement past the end, and the final group's reserved bandwidth is not\nincluded when the array is summed.\n\nGive group_reserved[] MAX_GROUPS + 1 entries so direct Group ID\nindexing covers the reserved ID 0 and valid IDs 1 through MAX_GROUPS.","modified":"2026-09-05T03:48:34.253980927Z","published":"2026-09-03T08:21:51.946Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80736.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0a8c9ed4f166216642a8c084f0de415169c88088"},{"type":"WEB","url":"https://git.kernel.org/stable/c/0bfb67ba366cd68d1d0ad935760577bae1d5df27"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9977321835c7ae71d12a43bed7baa5bd514d01c3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d2ee4d47aacbd2ba456092eeec670dba35fde291"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80736.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80736"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"52a4490e89d7c4effe613d8dffd2ac0a2a786bd7"},{"fixed":"0bfb67ba366cd68d1d0ad935760577bae1d5df27"},{"fixed":"9977321835c7ae71d12a43bed7baa5bd514d01c3"},{"fixed":"0a8c9ed4f166216642a8c084f0de415169c88088"},{"fixed":"d2ee4d47aacbd2ba456092eeec670dba35fde291"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80736.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.0"},{"fixed":"6.12.104"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.45"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.9"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80736.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}