In the Linux kernel the Thunderbolt DP tunnel allocation routine can omit a mandatory callback, which means the reference counter for a tunnel is never decreased. This leads to a memory/resource leak for each tunnel created without the callback, potentially exhausting kernel memory or delaying operations that depend on those resources. The vulnerability also introduces a synchronous path that can block hibernation restore for up to twelve seconds while waiting for capability reads to complete.

All Linux kernel installations that include the Thunderbolt DP tunnel driver are affected. No specific kernel version numbers are listed; the issue is present until the kernel incorporates the fix included in the referenced commits.

The problem is a kernel-level resource leak that requires privileged execution of Thunderbolt driver code to manifest. While the CVSS score is not provided, the potential for denial of service and the fact that the bug resides in the kernel suggest a high impact. The attacker would need local or elevated privileges to trigger the allocation path, which lowers the likelihood of remote exploitation. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog.