CVE-2026-89537

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gsskrb5verifymicv2 gsskrb5verifymicv2 reads the token ID at ptr0..1, the flags byte at ptr2, and padding at ptr3..7, then passes ptr + GSSKRB5TOKHDRLEN and cksumlen to gsskrb5micbuildsg...

CVE-2026-89537

CVE-2026-89537 is an out-of-bounds read in the Linux kernel 's SUNRPC subsystem, specifically in gss_krb5_verify_mic_v2() . The function reads the token ID, flags byte, and padding from a GSS-KRB5 MIC token without first checking read_token->len against the minimum safe size of GSS_KRB5_TOK_HD...