PT-2026-36645 · Debian+2 · Openvpn

Published 2026-04-23 · Updated 2026-05-20 · CVE-2026-40215

OSV

Guannan Wang, Zhanpeng Liu, Guancheng Li, and Emma Reuter discovered that OpenVPN incorrectly handled suitably malformed packets with valid tls-crypt-v2 keys. An attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service. (CVE-2026-35058)

Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that OpenVPN had a race condition in the TLS handshake process that could leak packet data from a previous handshake under certain circumstances. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-40215)

Related Identifiers

CVE-2026-40215

MGASA-2026-0126

USN-8286-1

Affected Products

Openvpn

References · 14

• https://osv.dev/vulnerability/MGASA-2026-0126 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-40215 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8286-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-40215 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-40215 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35058 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/SFR4RR6F447AZK2ZTKVGZP3NKKWFW6DW · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-40215 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2026-0126.html · Security Note
• https://osv.dev/vulnerability/USN-8286-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-40215 · Security Note
• https://community.openvpn.net/Security%20Announcements/CVE-2026-35058 · Note
• https://community.openvpn.net/Security%20Announcements/CVE-2026-40215 · Note
• https://bugs.mageia.org/show_bug.cgi?id=35442 · Note