SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80520

HIGH · CVSS 7.5 EPSS 0.43%

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's OpenVPN implementation, specifically in the `ovpn_crypto_kill_key` function, which improperly assumes that both crypto slots are populated. This can lead to a NULL dereference when attempting to remove a key that may not be present, potentially causing a denial of service. Linux system administrators and developers using OpenVPN should prioritize this issue to mitigate risks associated with system stability and security.

CVE
CVE-2026-80520
Severity
HIGH
CVSS
7.5
EPSS
0.43%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present. Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.