CVE-2026-45964
In CVE-2026-45964, the Linux kernel SUNRPC path gss_alloc_msg leaks a kref on the error path when kstrdup_const() fails; a corresponding kref_put() that would release gss_auth was missing. The described fix adds a forward declaration for gss_free_callback() and calls kref_put() in the err_put_pip...