CVE-2026-64119

In the Linux kernel, the following vulnerability has been resolved: l2tp: use listdelrcu in l2tpsessionunhash An unprivileged local user can pin a host CPU indefinitely in l2tpsessiongetbyifname by issuing L2TPCMDSESSIONGET on L2TPATTRIFNAME concurrently with L2TPCMDSESSIONCREATE and...

CVE-2026-64119

CVE-2026-64119: In the Linux kernel, the vulnerability affects the L2TP subsystem. The bug arises in l2tp_session_unhash() where a session is removed from tunnel->session_list with list_del_init(), while readers traverse the list with list_for_each_entry_rcu() under rcu_read_lock_bh(). This le...

CVE-2026-64119 l2tp: use list_del_rcu in l2tp_session_unhash

In the Linux kernel, the following vulnerability has been resolved: l2tp: use listdelrcu in l2tpsessionunhash An unprivileged local user can pin a host CPU indefinitely in l2tpsessiongetbyifname by issuing L2TPCMDSESSIONGET on L2TPATTRIFNAME concurrently with L2TPCMDSESSIONCREATE and...

PT-2026-61436

In the Linux kernel, the following vulnerability has been resolved: l2tp: use list del rcu in l2tp session unhash An unprivileged local user can pin a host CPU indefinitely in l2tp session get by ifname by issuing L2TP CMD SESSION GET on L2TP ATTR IFNAME concurrently with L2TP CMD SESSION CREATE...