description: A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.
problem types: CWE-667->CWE-362->CWE-476
affected:
{
vendor: n/a
product: Linux kernel (l2tp)
versions:
version: up to v6.0, status: affected
}