10 matches found
CVE-2026-80519
A flaw was found in the Linux kernel. Specifically, within the OpenVPN OVPN module's crypto completion callback mechanism, a timing issue exists. This vulnerability arises when peer references are released prematurely, before the associated cleanup operations are complete. An attacker could...
EUVD-2026-66585
In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and peer references. The peer reference pins the netdev, and dropping the last peer reference can let netdev unregistration a...
CVE-2026-80519
In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and peer references. The peer reference pins the netdev, and dropping the last peer reference can let netdev unregistration a...
UBUNTU-CVE-2026-80519
In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and peer references. The peer reference pins the netdev, and dropping the last peer reference can let netdev unregistration a...
CVE-2026-80519
In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and peer references. The peer reference pins the netdev, and dropping the last peer reference can let netdev unregistration a...
CVE-2026-80519 ovpn: finish crypto callback cleanup before peer release
In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and peer references. The peer reference pins the netdev, and dropping the last peer reference can let netdev unregistration a...
CVE-2026-80519 ovpn: finish crypto callback cleanup before peer release
In the Linux kernel, the following vulnerability has been resolved: ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and peer references. The peer reference pins the netdev, and dropping the last peer reference can let netdev unregistration a...
CVE-2026-80519
CVE-2026-80519 affects the Linux kernel OpenVPN module (ovpn) due to an incorrect ordering of reference cleanup in crypto completion callbacks. Specifically, the peer reference (which pins the netdev) is dropped before the callback finishes its own cleanup, allowing ovpn_crypto_key_slot_put to sc...
PT-2026-82135
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ovpn component where crypto completion callbacks do not properly manage references to the key-slot and peer. Specifically, the peer reference pins the netdev, and...
Linux Distros Unpatched Vulnerability : CVE-2026-80519
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovpn: finish crypto callback cleanup before peer release Crypto completion callbacks hold both key-slot and peer references. The peer reference pins the netdev,...