CVE-2026-68342

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the OVPN UDP socket destruction process. The function ovpn peer release p2p() is designed to release a P2P peer only if it uses the socket being destroyed. However, if a replacement peer is published before the old socket is destroyed, the function may incorrectly call ovpn peer put(peer) on the new replacement peer due to a socket mismatch. This action drops the reference to the current peer, potentially freeing the ovpn peer object while ovpn->peer still points to it. This leads to subsequent use-after-free accesses during peer and socket cleanup, specifically within ovpn peer remove(), ovpn socket release(), ovpn nl peer del notify(), and unlock ovpn(). KASAN identifies this as a slab-use-after-free on the kmalloc-1k ovpn peer object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.