Vulnerability in Linux

CVE-2026-53262

In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() pppol2tp_ioctl() read sock->sk->sk_user_data directly without any locks or reference counting. If a contro…

EPSS: 0.002 (5.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions fd558d186df2c13a22455373858bae634a4795af, 2.6.35, 0

References