Get the latest tech news
Linux 6.13 To Enhance Logic For Trusting Built-In Thunderbolt Controllers
Due to the possibility of DMA attacks from connected Thunderbolt devices, Linux and other platforms have built up safeguards over the years and different security levels for Thunderbolt to better protect systems having this high speed interface exposing PCIe
Esther Shimanovich with Google prepared the patch for detecting and trusting built-in Thunderbolt chips. Esther explains with the patch queued into the PCI subsystem's "thunderbolt" branch ahead of the Linux 6.13 merge window: This host controller can be identified by virtue of being located directly below an external-facing root port that lacks integrated Thunderbolt.
Or read this on Phoronix