CVE-2026-80520
Last modified
CVE-2026-80520 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present. Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches..
Description
In the Linux kernel, the following vulnerability has been resolved: ovpn: fix NULL dereference when killing missing key ovpn_crypto_kill_key assumes both crypto slots are populated and dereferences each slot before checking it. That is not guaranteed: a peer can have only one installed key, and the kill path may be asked to remove a key that is not present. Read each slot once while holding the crypto state lock, check for NULL before looking at key_id, and only replace the slot that actually matches.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 89d3c0e4612afa1c6429ed68d298e35592fbe208, < a47a080d06ee9d94dc6a2da0fc2b9beeeedb92b3; >= 89d3c0e4612afa1c6429ed68d298e35592fbe208, < acf32a5dff082044cf0fd9492f3c10b7357c15ee; >= 89d3c0e4612afa1c6429ed68d298e35592fbe208, < 41d44ac7a61e2f74453af40d4fe1b82af9ea0ada |
| Linux | Linux | 6.16 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-80520?
How severe is CVE-2026-80520?
How do I fix CVE-2026-80520?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-80494The Yogeta WP Cloud WordPress plugin through 1.0 does not va…8.6
- CVE-2026-8050In SignalRGB versions prior to 1.3.7.0, seven of the thirtee…7.5
- CVE-2026-8051OS command injection in Ivanti Virtual Traffic Manager befor…7.2
- CVE-2026-80515In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the manage…8.9
- CVE-2026-80519In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-8052HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulner…6
- CVE-2026-80521In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80522In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80523In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-80526In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80527In the Linux kernel, the following vulnerability has been re…7.5
- CVE-2026-80528In the Linux kernel, the following vulnerability has been re…9.8
Are you affected by CVE-2026-80520?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST