7.3

CVE-2026-80735

ovpn: ensure socket is owned by ovpn before deref sk_user_data

In the Linux kernel, the following vulnerability has been resolved:

ovpn: ensure socket is owned by ovpn before deref sk_user_data

Some subsystems, like BPF SOCKMAP, set sk_user_data without
actually setting the encap_type.

For this reason, we must make sure that the type is the
one ovpn expects before dereferencing sk_user_data.

Failing to do so may lead to out-of-bounds reads.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f6226ae7a0cd47aaa9175aca6a1e19600f884cbf
Version < 61fb3cca40ff938671474f4a16adb908c19032d7
Status affected
Version f6226ae7a0cd47aaa9175aca6a1e19600f884cbf
Version < 43a31142e1d22b3cf5490bd94a94db7196901734
Status affected
Version f6226ae7a0cd47aaa9175aca6a1e19600f884cbf
Version < 59aed1eb60d70678a53acccb0cb337a26ce6680e
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.18.*
Version 6.18.45
Status unaffected
Version <= 7.1.*
Version 7.1.9
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.024
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.3 1.8 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/61fb3cca40ff938671474f4a16adb908c19032d7
https://git.kernel.org/stable/c/43a31142e1d22b3cf5490bd94a94db7196901734
https://git.kernel.org/stable/c/59aed1eb60d70678a53acccb0cb337a26ce6680e