CVE-2026-64045

A flaw was found in the Linux kernel's OpenVPN (ovpn) TCP module. A race condition in the ovpn_tcp_close() function allows it to access memory after it has been freed. This vulnerability arises when the function attempts to use a socket peer pointer after its associated socket object has been concurrently released. A local user can exploit this by triggering a peer removal while closing a TCP connection, which may lead to memory corruption and a denial of service.