EUVD-2026-103649

In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when learning local endpoint struct ovpnbind is published through peer-bind with RCU, but local endpoint learning updates bind-local in place under peer-lock. UDP TX reads the field without that lock. In...

CVE-2026-98604

A vulnerability in the Linux kernel involves how struct ovpn_bind is handled during local endpoint learning. While the structure is published via peer->bind using RCU , the bind->local field is updated in place under peer->lock. Because UDP TX reads this field without acquiring that lock...

CVE-2026-98604 ovpn: replace bind when learning local endpoint

In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when learning local endpoint struct ovpnbind is published through peer-bind with RCU, but local endpoint learning updates bind-local in place under peer-lock. UDP TX reads the field without that lock. In...