EUVD-2026-76450

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: reject duplicate CREDSVALUE options gssxdecoptionarray walks the wire-supplied option array and, for every entry whose name matches CREDSVALUE, calls gssxdeclinuxcreds on the same struct svccred. That helper unconditional...

CVE-2026-89539

Linux kernel SUNRPC subsystem: gssx_dec_option_array() processes wire-supplied GSS option entries and calls gssx_dec_linux_creds() for each CREDS_VALUE match. Because that helper unconditionally overwrites creds->cr_group_info without releasing the previous pointer, a reply containing two CRED...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fixed some memory leaks in gssxdecoptionarray. The creds and oa-data fields need to be freed during error-handling processes after they are allocated. Therefore, this patch adds the necessary deallocation operations in th...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: Fixed memory leaks in XDR decoding error paths. The functions gssxdecctx, gssxdecstatus, and gssxdecname allocate memory through gssxdecbuffer, which calls kmemdup. When a subsequent decoding operation fails, the...

SUSE CVE-2026-45870

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and gssxdecname functions allocate memory via gssxdecbuffer, which calls kmemdup. When a subsequent decode operation fails, these...

Linux Distros Unpatched Vulnerability : CVE-2026-45870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: authgss: fix memory leaks in XDR decoding error paths The gssxdecctx, gssxdecstatus, and gssxdecname functions allocate memory via gssxdecbuffer, which...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-27388)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-27388 advisory. - In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-403236)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-403236 advisory. In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssxdecoptionarray The creds and oa-data need to be freed in the...

Linux Distros Unpatched Vulnerability : CVE-2024-27388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SUNRPC: fix some memleaks in gssxdecoptionarray The creds and oa-data need to be freed in the error- handling paths after their allocation. So this patch add...

The vulnerability of the SUNRPC component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the SUNRPC component in the Linux operating system’s kernel is related to a memory leak in the gssxdecoptionarray function. Exploiting this vulnerability can allow an attacker to cause a service failure...

kernel: SUNRPC: fix some memleaks in gssx_dec_option_array

A flaw was found in the authrpcgss module in the Linux kernel. A memory leak can occur due to improper error handling, potentially impacting system performance and possibly resulting in a denial of service...

SUSE CVE-2024-27388

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssxdecoptionarray The creds and oa-data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths...

DEBIAN-CVE-2024-27388

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix some memleaks in gssxdecoptionarray The creds and oa-data need to be freed in the error-handling paths after their allocation. So this patch add these deallocations in the corresponding paths...

PT-2024-8449

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a memory leak in the gssx dec option array function of the SUNRPC component in the Linux kernel. This memory leak can be exploited to cause a denial of service. T...