CVE-2026-80519

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ovpn component where crypto completion callbacks do not properly manage references to the key-slot and peer. Specifically, the peer reference pins the netdev, and releasing it before the callback finishes its cleanup can lead to a race condition. If ovpn crypto key slot put() executes after ovpn peer put(), it may schedule an RCU (Read-Copy-Update) callback—a mechanism for updating shared data without locks—backed by module text after the ovpn cleanup rcu barrier() has already executed. Additionally, the TX error path previously freed the remaining skb (socket buffer) after ovpn peer put(), which placed the callback cleanup outside the intended peer and netdev lifetime window.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.