CVE-2026-63803

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the HDLC PPP protocol implementation. The struct ppp (allocated as hdlc->state) registers timers for PPP control protocols (LCP, IPCP, and IPV6CP) using timer setup(). When detach hdlc protocol() frees this memory via kfree(), it fails to synchronize these timers because the PPP protocol lacked a .detach callback. Consequently, a ppp timer callback that is already executing can survive the memory free and subsequently dereference proto->state or ppp->lock in freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.