CVE-2026-80520 | BDVDB-2026-365213 Detail

Description#

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present. Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-26Record published in the CVE List.
2. Version 22026-08-27Most recent update recorded in the CVE List.