PT-2026-61360 · Linux · Linux
CVE-2026-64043
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
ovpn: fix race between deleting interface and adding new peer
While deleting an existing ovpn interface, there is a very
narrow window where adding a new peer via netlink may cause
the netdevice to hang and prevent its unregistration.
It may happen during ovpn dellink(), when all existing peers are
freed and the device is queued for deregistration, but a
CMD PEER NEW message comes in adding a new peer that takes again
a reference to the netdev.
At this point there is no way to release the device because we are
under the assumption that all peers were already released.
Fix the race condition by releasing all peers in ndo uninit(),
when the netdevice has already been removed from the netdev
list.
Also ovpn peer add() has now an extra check that forces the
function to bail out if the device reg state is not REGISTERED.
This way any incoming CMD PEER NEW racing with the interface
deletion routine will simply stop before adding the peer.
Note that the above check happens while holding the netdev lock
to prevent racing netdev state changes.
ovpn dellink() is now empty and can be removed.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux