Buffer Overflow Vulnerability in FreeBSD PPP Command Interface

CVE-2026-58097

What is CVE-2026-58097?

The vulnerability arises in the mp_SetEnddisc() function, which improperly handles user-supplied PSN endpoint values, leading to a buffer overflow. This flaw can be exploited by local users who have access to the PPP command interface, potentially allowing them to crash the service or execute arbitrary code with root privileges. System administrators should ensure they apply the latest patches and monitor their environments to mitigate the associated risks.

References