CVE-2026-80753

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The ovpn module queues work items whose callbacks execute module text on global system workqueues. This creates a condition where the module exit process lacks a driver-owned drain point to guarantee that callbacks have fully returned before the module text is freed. While object references protect the used objects, they do not ensure the workqueue function has returned, potentially allowing a worker to drop the final reference that unblocks device teardown while still executing ovpn code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.