CVE-2026-43254

kernel: ovpn: tcp - fix packet extraction from stream

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's handling of OpenVPN (ovpn) TCP network traffic. This vulnerability occurs when the kernel processes multiple network packets that have been combined into a single stream. An attacker could exploit this by sending specially crafted TCP packets, leading to issues such as dropped packets and reduced network performance, effectively causing a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-190 · Integer Overflow or Wraparound