A vulnerability in the Linux kernel's PPP implementation allows malformed packets that claim to be LCP packets to be processed incorrectly. The issue arises because the function ppp_async_encode() assumes LCP packets are valid if their code is between 1 and 7, but malformed packets lacking a proper body can bypass this check. The vulnerability has been addressed by adding a validation function, ppp_check_packet(), to reject malformed packets that claim to be LCP packets but do not have a valid body.