#PPPoL2TP
LightNews LightNews
cve.skyfleet.blue
CVE-2026-53262 - l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
CVE ID : CVE-2026-53262

Published : June 25, 2026, 8:39 a.m. | 1 hour, 4 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

l2tp: pppol2tp: hold ref...
CVE-2026-53262 - l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() pppol2tp_ioctl() read sock->sk->sk_user_data directly without any locks or reference counting. If a controllable sleep was induced during copy_from_user() (e.g. via a userfaultfd page fault sleep), a concurrent socket close could trigger pppol2tp_session_close() …
cvefeed.io
June 25, 2026 at 10:00 AM
neustradamus.bsky.social
#PPP 2.5.3 has been released ( #pppd / #PointToPointProtocolDeamon / #PointToPointProtocol / #PPPoE / #PPPoA / #PPPoL2TP / #PointToPoint / #InternetProtocol / #IPv4 / #IPv6 / #EAP / #ExtensibleAuthenticationProtocol / #EAPTLS / #EAPMSCHAPv2 / #RADIUS / #SecureRemotePasswordProtocol) ppp.samba.org
ppp
ppp.samba.org
June 4, 2026 at 1:41 PM
euvd-bot.bsky.social
🚨 EUVD-2026-55584
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF

pppol2tp_recv() run...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-55584

#cybersecurity #infosec #cve #euvd
August 10, 2026 at 2:01 PM
euvd-bot.bsky.social
🚨 EUVD-2026-55584
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF

pppol2tp_recv() run...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-55584

#cybersecurity #infosec #cve #euvd
August 10, 2026 at 2:01 PM
neustradamus.bsky.social
#PPP 2.5.2 has been released ( #pppd / #PointToPointProtocolDeamon / #PointToPointProtocol / #PPPoE / #PPPoA / #PPPoL2TP / #PointToPoint / #InternetProtocol / #IPv4 / #IPv6 / #EAP / #ExtensibleAuthenticationProtocol / #EAPTLS / #EAPMSCHAPv2 / #RADIUS / #SecureRemotePasswordProtocol ) ppp.samba.org
ppp
ppp.samba.org
January 4, 2025 at 4:28 AM
neustradamus.bsky.social
#PPP 2.5.1 has been released (#pppd / #PointToPointProtocolDeamon / #PointToPointProtocol / #PPPoE / #PPPoA / #PPPoL2TP / #PointToPoint / #InternetProtocol / #IPv4 / #IPv6 / #EAP / #ExtensibleAuthenticationProtocol / #EAPTLS / #EAPMSCHAPv2 / #RADIUS / #SecureRemotePasswordProtocol) ppp.samba.org
ppp
ppp.samba.org
September 18, 2024 at 10:38 PM
euvd-bot.bsky.social
🚨 EUVD-2026-39213
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()

pppol2tp_ioctl() read sock-...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39213

#cybersecurity #infosec #cve #euvd
June 25, 2026 at 10:00 AM