CVE-2026-64043

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ovpn: fix race between deleting interface and adding new peer<br /> <br /> While deleting an existing ovpn interface, there is a very<br /> narrow window where adding a new peer via netlink may cause<br /> the netdevice to hang and prevent its unregistration.<br /> <br /> It may happen during ovpn_dellink(), when all existing peers are<br /> freed and the device is queued for deregistration, but a<br /> CMD_PEER_NEW message comes in adding a new peer that takes again<br /> a reference to the netdev.<br /> <br /> At this point there is no way to release the device because we are<br /> under the assumption that all peers were already released.<br /> <br /> Fix the race condition by releasing all peers in ndo_uninit(),<br /> when the netdevice has already been removed from the netdev<br /> list.<br /> <br /> Also ovpn_peer_add() has now an extra check that forces the<br /> function to bail out if the device reg_state is not REGISTERED.<br /> This way any incoming CMD_PEER_NEW racing with the interface<br /> deletion routine will simply stop before adding the peer.<br /> <br /> Note that the above check happens while holding the netdev_lock<br /> to prevent racing netdev state changes.<br /> <br /> ovpn_dellink() is now empty and can be removed.