CVE-2026-58095
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
The mp_Enddisc() function used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer. A malicious PPP peer can crash ppp(8) or potentially execute arbitrary code as root.
Risk Assessment
Similar to CVE-2026-58096, an attacker can remotely crash the service or gain root privileges, posing a serious threat to system integrity.
Recommendation
Install ppp(8) updates that include the fix for this vulnerability.
Original NVD description (English source)
mp_Enddisc() used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result buffer. A malicious PPP peer can crash ppp(8) or potentially execute arbitrary code as root.