The vulnerability of the pppol2tp_ioctl() function in the net/l2tp/l2tp_ppp.c module of the Layer Two Tunneling Protocol (L2TP) implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pppol2tpioctl function in the net/l2tp/l2tpppp.c module of the Layer 2 Tunneling Protocol implementation in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098766)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098766 advisory. In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tpioctl pppol2tpioctl read sock-sk-skuserdata...

EUVD-2026-39213

In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tpioctl pppol2tpioctl read sock-sk-skuserdata directly without any locks or reference counting. If a controllable sleep was induced during copyfromuser e.g. via a userfaultfd pag...

CVE-2026-53262: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tpioctl pppol2tpioctl read sock-sk-skuserdata directly without any locks or reference counting. If a controllable sleep was induced during copyfromuser e.g. via a userfaultfd pag...