CVE-2026-89551

CVE-2026-89551 is a CRITICAL (CVSS 9.8) integer underflow in the Linux kernel's SUNRPC subsystem. The xdr_buf_trim() function subtracts consumed bytes from buf->len without clamping, so when called from gss_krb5_unwrap_v2() with a small wire-derived buf->len while page-scale iov_lens are pr...