Unrated

UBUNTU-CVE-2026-93337

Type: advisorySource: OSV1 source record

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains an improper input validation vulnerability that allows local users with VPN connection creation permissions to inject arbitrary pppd directives by supplying mru or mtu property values containing trailing non-numeric content after a valid integer. Attackers can exploit the verbatim write of unvalidated strings into the pppd options file via write_config_option() to inject the plugin directive, causing the privileged pppd process to load an attacker-controlled shared object and achieve arbitrary code execution as root.

Announced 17 Sept 2026Group revision 1

Original source ↗

UBUNTU-CVE-2026-93337

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:UBUNTU-CVE-2026-93337

network-manager-l2tp

Source reference: /affected/0/package/name

Affected versions: 1.2.8-1
Source reference: /affected/0/versions
1.2.8-2build1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

network-manager-l2tp

Source reference: /affected/1/package/name

Affected versions: 1.2.10-1
Source reference: /affected/1/versions
1.2.14-1
Source reference: /affected/1/versions
1.2.16-1
Source reference: /affected/1/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

network-manager-l2tp

Source reference: /affected/2/package/name

Affected versions: 1.2.18-1build1
Source reference: /affected/2/versions
1.20.0-1
Source reference: /affected/2/versions
1.20.0-1build1
Source reference: /affected/2/versions
1.20.0-1build2
Source reference: /affected/2/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

network-manager-l2tp

Source reference: /affected/3/package/name

Affected versions: 1.20.8-1
Source reference: /affected/3/versions
1.20.10-1
Source reference: /affected/3/versions
1.20.12-1
Source reference: /affected/3/versions
1.20.12-1build1
Source reference: /affected/3/versions
1.20.12-1build2
Source reference: /affected/3/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

network-manager-l2tp

Source reference: /affected/4/package/name

Affected versions: 1.20.20-2
Source reference: /affected/4/versions
1.52.0-2
Source reference: /affected/4/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "network-manager-l2tp",
      "purl": "pkg:deb/ubuntu/network-manager-l2tp?arch=source&distro=bionic",
      "ecosystem": "Ubuntu:18.04:LTS"
    },
    "versions": [
      "1.2.8-1",
      "1.2.8-2build1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93337.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "network-manager-l2tp",
          "binary_version": "1.2.8-2build1"
        },
        {
          "binary_name": "network-manager-l2tp-gnome",
          "binary_version": "1.2.8-2build1"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "network-manager-l2tp",
      "purl": "pkg:deb/ubuntu/network-manager-l2tp?arch=source&distro=focal",
      "ecosystem": "Ubuntu:20.04:LTS"
    },
    "versions": [
      "1.2.10-1",
      "1.2.14-1",
      "1.2.16-1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93337.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "network-manager-l2tp",
          "binary_version": "1.2.16-1"
        },
        {
          "binary_name": "network-manager-l2tp-gnome",
          "binary_version": "1.2.16-1"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "network-manager-l2tp",
      "purl": "pkg:deb/ubuntu/network-manager-l2tp?arch=source&distro=jammy",
      "ecosystem": "Ubuntu:22.04:LTS"
    },
    "versions": [
      "1.2.18-1build1",
      "1.20.0-1",
      "1.20.0-1build1",
      "1.20.0-1build2"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93337.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "network-manager-l2tp",
          "binary_version": "1.20.0-1build2"
        },
        {
          "binary_name": "network-manager-l2tp-gnome",
          "binary_version": "1.20.0-1build2"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "network-manager-l2tp",
      "purl": "pkg:deb/ubuntu/network-manager-l2tp?arch=source&distro=noble",
      "ecosystem": "Ubuntu:24.04:LTS"
    },
    "versions": [
      "1.20.8-1",
      "1.20.10-1",
      "1.20.12-1",
      "1.20.12-1build1",
      "1.20.12-1build2"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93337.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "network-manager-l2tp",
          "binary_version": "1.20.12-1build2"
        },
        {
          "binary_name": "network-manager-l2tp-gnome",
          "binary_version": "1.20.12-1build2"
        }
      ]
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "network-manager-l2tp",
      "purl": "pkg:deb/ubuntu/network-manager-l2tp?arch=source&distro=resolute",
      "ecosystem": "Ubuntu:26.04:LTS"
    },
    "versions": [
      "1.20.20-2",
      "1.52.0-2"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-93337.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "network-manager-l2tp",
          "binary_version": "1.52.0-2"
        },
        {
          "binary_name": "network-manager-l2tp-gnome",
          "binary_version": "1.52.0-2"
        }
      ]
    }
  }
]

Publisher severity

No explicit severity was provided.

Event: #51967 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 14:36:48 GMT
Publisher date: Thu, 17 Sep 2026 20:19:00 GMT

Read the original announcement

Revision history

25 Oct 2026UBUNTU-CVE-2026-93337 · Revision 1Source updated