mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface. (CVE-2026-58097)

The vulnerability identified as CVE-2026-58097 involves the mp_SetEnddisc() function improperly handling input by copying a user-supplied PSN endpoint value without length validation. This leads to a buffer overflow condition exploitable through the ppp(8) command interface. A local attacker with access to this interface can trigger the overflow to crash the process or execute arbitrary code with root-level permissions. The issue is classified under CWE-122 (Heap-based Buffer Overflow) and has a CVSS v3.1 score of 7.8, indicating high severity. No patch or remediation details are provided in the available data.

A local user with access to the ppp(8) command interface can exploit this vulnerability to cause a denial of service by crashing ppp(8) or potentially execute arbitrary code with root privileges, leading to full system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to the ppp(8) command interface to trusted users only to reduce the risk of exploitation.