linneman
labs
building
breaking
observing
content
···
verified
home
/ nm-l2tp
Nm-L2tp
2026.08.31
A Newline to Root: CVE-2026-19624
An unprivileged D-Bus call writes a root-parsed VPN config value. One newline, root code execution, confinement escape.