CVE-2026-58097

The vulnerability arises from the mp_SetEnddisc() function, which improperly handles user-supplied PSN endpoint values without validating their length, leading to a buffer overflow in the ppp(8) command interface. This flaw allows a local user to crash the ppp(8) service or potentially execute arbitrary code with root privileges. System administrators and security teams managing environments that utilize the ppp(8) command interface should prioritize addressing this vulnerability to mitigate the risk of unauthorized access and system instability.