CVE-2026-64043
kernel: ovpn: fix race between deleting interface and adding new peer
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an ovpn interface is being deleted while a new peer is simultaneously added via netlink. This timing issue may cause the network device to become unresponsive, preventing its proper removal and leading to a denial of service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-413 · Improper Resource Locking