CVE-2026-80520
- Source
- https://cve.org/CVERecord?id=CVE-2026-80520
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80520.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-80520
- Downstream
- Published
- 2026-08-26T14:37:01.983Z
- Modified
- 2026-08-27T03:57:20.099499454Z
- Summary
- ovpn: fix NULL dereference when killing missing key
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ovpn: fix NULL dereference when killing missing key
ovpncryptokill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present.
Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80520.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/41d44ac7a61e2f74453af40d4fe1b82af9ea0ada
- https://git.kernel.org/stable/c/a47a080d06ee9d94dc6a2da0fc2b9beeeedb92b3
- https://git.kernel.org/stable/c/acf32a5dff082044cf0fd9492f3c10b7357c15ee
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80520.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-80520