PT-2026-61360 · Linux · Linux
CVE-2026-64043
·
Publicado
2026-07-19
·
Atualizado
2026-07-19
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
ovpn: fix race between deleting interface and adding new peer
While deleting an existing ovpn interface, there is a very
narrow window where adding a new peer via netlink may cause
the netdevice to hang and prevent its unregistration.
It may happen during ovpn dellink(), when all existing peers are
freed and the device is queued for deregistration, but a
CMD PEER NEW message comes in adding a new peer that takes again
a reference to the netdev.
At this point there is no way to release the device because we are
under the assumption that all peers were already released.
Fix the race condition by releasing all peers in ndo uninit(),
when the netdevice has already been removed from the netdev
list.
Also ovpn peer add() has now an extra check that forces the
function to bail out if the device reg state is not REGISTERED.
This way any incoming CMD PEER NEW racing with the interface
deletion routine will simply stop before adding the peer.
Note that the above check happens while holding the netdev lock
to prevent racing netdev state changes.
ovpn dellink() is now empty and can be removed.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux