CVE-2026-53262

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the pppol2tp ioctl() function. The function reads sock->sk->sk user data without locks or reference counting. If a sleep is induced during copy from user(), a concurrent socket close can trigger pppol2tp session close() asynchronously, freeing the l2tp session structure. When the ioctl thread resumes, it dereferences the stale session pointer. Use-After-Free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.