CVE-2026-98604

A flaw was found in the Linux kernel's OpenVPN (ovpn) subsystem. A race condition exists where local network endpoint updates modify binding data without proper synchronization while outbound network traffic reads the address concurrently. A remote peer or concurrent network activity could trigger this flaw during IPv6 updates, resulting in an inconsistent address read, packet transmission errors, and a potential Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.