CVE-2026-63803

A flaw was found in the Linux kernel's hdlc_ppp module. This use-after-free vulnerability occurs because the Point-to-Point Protocol (PPP) control timers are not properly synchronized before the associated memory is freed. An attacker could potentially exploit this by triggering a race condition, leading to system instability, a denial of service, or potentially arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.