CVE-2026-45929
kernel: ovpn: fix possible use-after-free in ovpn_net_xmit
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's ovpn module. A use-after-free vulnerability exists in the ovpn_net_xmit function where a freed skb (socket buffer) pointer can be used for subsequent operations. This can occur when skb_share_check frees the original skb if it is shared, leading to a stale pointer being used. This flaw could potentially lead to system instability, denial of service, or other unspecified impacts.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference