CVE-2026-89550

CVE-2026-89550 is a division-by-zero vulnerability in the Linux kernel's SUNRPC svcauth_gss module. The function svcauth_gss_unwrap_priv() enforces only an upper-bound check on the wire-supplied token length, allowing tokens of 16 bytes or less (the RFC 4121 header size) to reach gss_krb5_unwrap_...