CVE-2026-80520

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL dereference occurs in the ovpn component when removing a missing key. The function ovpn crypto kill key() assumes that both crypto slots are populated and dereferences them before performing a check. However, a peer may have only one installed key, or the process may attempt to remove a key that is not present, leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.