Re: [PATCH] ovpn: prevent UAF re-add to by_transp_addr on float-vs-delete race

[Antonio Quartulli]

Hi there,

On 09/07/2026 00:46, Ibrahim Hashimov wrote:
[...]

> Fixes: f0281c1d3732 ("ovpn: add support for updating local or remote UDP endpoint")
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Ibrahim Hashimov <security@xxxxxxxxxxxx>
> Assisted-by: AuditCode-AI:2026.07

Sorry for the delay in getting back to you.
We already have a fix for this bug that is queued for being sent to net.

You can find it here:

https://github.com/OpenVPN/ovpn-net-next/commit/beb427921aafd186eb139349bf04c6d54a4927f5

I was caught by Sashiko's fire and therefore had hard time sending all 
the fixes in my queue, but I am getting there.

If you want, please check the patch at the link above.


Thanks a lot.

Best Regards,

--
Antonio Quartulli
OpenVPN Inc.