CVE-2026-58097

mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. A local user with access to the ppp(8) command interface can crash ppp(8) or potentially execute arbitrary code as root.

Score

CVSS 3.1 7.8 High

Status

Analyzed - secteam@freebsd.org

Published

2026-08-26

Last modified

2026-08-27

Weaknesses

CWE-122, CWE-130

Affected products

• Freebsd (Freebsd)

References

• https://security.freebsd.org/advisories/FreeBSD-SA-26:60.ppp.asc