Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.1
CVE-2026-40215: Ubuntu and Debian Linux: Privilege Escalation via Sudo Vulnerability
CVE-2026-40215 · published 4 months ago
Summary
Debian and Ubuntu Linux users need to update their systems to fix a security weakness that allows an attacker to gain elevated access to the system, potentially allowing them to install malicious software or access sensitive data. This affects systems running specific versions of the sudo package. To protect your system, apply the latest available update as soon as possible.
What to do
- Update debian openvpn to version 2.6.14-0+deb12u1.
- Update debian openvpn to version 2.6.14-1+deb13u2.
- Update debian openvpn to version 2.7.2-1.
- Update alpine openvpn to version 2.6.20-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | openvpn | All versions |
| Debian:12 | debian | openvpn |
< 2.6.14-0+deb12u1 Fix: upgrade to 2.6.14-0+deb12u1
|
| Debian:13 | debian | openvpn |
< 2.6.14-1+deb13u2 Fix: upgrade to 2.6.14-1+deb13u2
|
| Debian:14 | debian | openvpn |
< 2.7.2-1 Fix: upgrade to 2.7.2-1
|
| Alpine:v3.21 | alpine | openvpn |
< 2.6.20-r0 >= 2.6.0, < 2.6.20-r0 Fix: upgrade to 2.6.20-r0
|
| Alpine:v3.22 | alpine | openvpn |
< 2.6.20-r0 >= 2.6.0, < 2.6.20-r0 Fix: upgrade to 2.6.20-r0
|
| – | openvpn | openvpn |
>= 2.6.0, < 2.6.20 >= 2.7, < 2.7.2 cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:* |
| Alpine:v3.23 | alpine | openvpn |
>= 2.6.0, < 2.6.20-r0 < 2.6.20-r0 Fix: upgrade to 2.6.20-r0
|
| Alpine:v3.24 | alpine | openvpn |
>= 2.6.0, < 2.6.20-r0 Fix: upgrade to 2.6.20-r0
|
| Alpine:v3.20 | alpine | openvpn |
< 2.6.20-r0 >= 2.6.0, < 2.6.20-r0 Fix: upgrade to 2.6.20-r0
|
Original advisory text
A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during T...
A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory via a use-after-free triggered during TLS session promotion.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40215... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-40215 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-40215 Vendor Advisory
- https://community.openvpn.net/ReleaseHistory#openvpn-2620-released-22-april-2026 Vendor Advisory
- https://community.openvpn.net/ReleaseHistory#openvpn-272-released-22-april-2026 Vendor Advisory
- https://security.alpinelinux.org/vuln/CVE-2026-40215 Vendor Advisory
- https://community.openvpn.net/Security%20Announcements/CVE-2026-40215 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
CWE-416Use After Free
Timeline
Published8 Jun 2026
Updated4 Nov 2026
First seen23 Apr 2026
Sources
DEBIAN-CVE-2026-40215 · OSV
CVE-2026-40215 · NVD
ALPINE-CVE-2026-40215 · OSV
CVE-2026-40215 · OSV
Track software like this
Free during beta