linneman
labs
building
breaking
observing
content
···
verified
home
/ cve-2026-19624
CVE-2026-19624
2026.09.02
NetworkManager-l2tp: A Newline to Root
An unprivileged D-Bus call writes a root-parsed VPN config value. One newline, root code execution, confinement escape.