CVE-2026-58095 — ppp(8): incorrect length calculation in mp_Enddisc()
mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buf…
Published: 2026-08-26 · CVSS: 8.8 · CVSS 3.1
mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer. A malicious PPP peer can crash ppp(8) or potentially execute arbitrary code as root.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7