CVE-2026-45918

kernel: ovpn: tcp - don't deref NULL sk_socket member after tcp_close()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's handling of OpenVPN (Open Virtual Private Network) TCP (Transmission Control Protocol) connections. A race condition can occur when a userspace process closes a socket while a peer is in the kernel's release list. This can lead to a null pointer dereference when the kernel attempts to detach from the socket, causing a system crash and resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference