CVE-2026-58097 ppp(8): missing length validation in mp_SetEnddisc()

FreeBSD ppp(8) is a user-space Point-to-Point Protocol implementation installed setuid root . This vulnerability resides in mp_SetEnddisc() , a function handling Multilink PPP endpoint discriminators. The root cause is that a user-supplied PSN endpoint value is copied into a buffer without length...