CVE-2026-68398

CVE-2026-68398 describes an RCU-based use-after-free in the Linux kernel’s pppol2tp path. In pppol2tp_recv(), a channel’s internal struct (ppp channel) may be freed via kfree() without a grace period when the channel is bound but not attached to a ppp unit and not bridged. The teardown path can s...