# CVE-2026-115402 - Windows dco-win socket race with a TCP connect in flight

The ovpn-dco-win driver did not hold the socket while a TCP connect was in flight. A teardown at that moment could close the socket while WSK was still using it, and the request that started the connect could end up completed twice. Either race can end in a bug check, allowing a local denial of service.

ovpn-dco-win driver version 1.5.8 through 2.8.13 are affected. This is fixed in driver version 2.8.14, which is shipped with the OpenVPN 2.7.8-I002 Windows installers.

CVE Record: [CVE-2026-115402](https://www.cve.org/CVERecord?id=CVE-2026-115402)

Github:
* [OpenVPN/ovpn-dco-win commit c8637b356](https://github.com/OpenVPN/ovpn-dco-win/commit/c8637b3560b0188838385388c9222f79c2b6a660)

Release notes:
* [openvpn-2.7.8-I002](https://community.openvpn.net/ReleaseHistory#openvpn-278-i002-released-22-october-2026)

Reported-By: <REPORTER TBD>