CVE-2026-64044

A flaw was found in the Linux kernel's OpenVPN (ovpn) module. An error in the ovpn_nl_peer_new_doit() function's error handling for TCP connections can lead to a use-after-free vulnerability. This occurs because the peer's memory is prematurely released while userspace processes may still hold active references. An attacker could potentially exploit this to cause system instability, a denial of service, or possibly execute arbitrary code.