SB20260812189 - Use-after-free in Linux kernel net ovpn driver

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-68342)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a use-after-free in ovpn_peer_release_p2p() in the OpenVPN peer handling code when destroying an OVPN UDP socket after a peer replacement. A local user can trigger peer replacement and socket teardown to cause a denial of service.

The issue occurs when a replacement peer is published before the old UDP socket destruction path runs, leaving a stale peer reference reachable from later cleanup paths.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/016a50379d17b886d12a4efa5211a418e035fe70
• https://git.kernel.org/stable/c/b52c5103f64ee825996ca1ab8df7283cde8c5f86
• https://git.kernel.org/stable/c/c5bf6b39be235ef578af4d39872f0c68cda3b937