CVE-2026-80520ovpn: fix NULL dereference when killing missing key
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present. Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 27, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 89d3c0e4612afa1c6429ed68d298e35592fbe208 before a47a080d06ee9d94dc6a2da0fc2b9beeeedb92b3; from 89d3c0e4612afa1c6429ed68d298e35592fbe208 before acf32a5dff082044cf0fd9492f3c10b7357c15ee; 89d3c0e4612afa1c6429ed68d298e35592fbe208 builds before 41d44ac7a61e2f74453af40d4fe1b82af9ea0ada | CNA record |
References
- https://git.kernel.org/stable/c/a47a080d06ee9d94dc6a2da0fc2b9beeeedb92b3
- https://git.kernel.org/stable/c/acf32a5dff082044cf0fd9492f3c10b7357c15ee
- https://git.kernel.org/stable/c/41d44ac7a61e2f74453af40d4fe1b82af9ea0ada
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.