CVE-2026-80520

CVE-2026-80520 affects the Linux kernel's OVPN (in-kernel OpenVPN) module. The function ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking for NULL. However, a peer can have only one installed key, and the key-kill path may be asked to remove a...