CVE-2026-58096
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 26, 2026
Vendor
unknown
Description
LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would trigger an out-of-bounds write. A malicious PPP peer can exploit CVE-2026-58095 and CVE-2026-58096 to crash ppp(8) or potentially execute arbitrary code as root.