CVE-2026-58097

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description An issue exists where the mp SetEnddisc() function copies a user-supplied PSN endpoint value without performing length validation. This flaw allows a buffer overflow via the ppp(8) command interface, which a local user can exploit to crash ppp(8) or potentially execute arbitrary code with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.