CVE-2026-58097 — ppp(8): missing length validation in mp_SetEnddisc()
mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user with access to th…
Published: 2026-08-26 · CVSS: 7.8 · CVSS 3.1
mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user with access to the ppp(8) command interface can crash ppp(8) or potentially execute arbitrary code as root.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7