Linux Kernel Vulnerability in OpenVPN Socket Ownership

CVE-2026-80735

What is CVE-2026-80735?

A vulnerability has been identified in the Linux kernel affecting OpenVPN, where the ownership of sockets was not properly enforced before dereferencing the sk_user_data. Subsystems like BPF SOCKMAP may set sk_user_data without ensuring it complies with the expected encapsulation type. This oversight can result in potential out-of-bounds reads, posing a significant security risk if exploited. It is crucial for users and administrators to apply the latest kernel updates to mitigate this issue.

References