UBUNTU-CVE-2026-45964

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssauth kref leak in gssallocmsg error path Commit 5940d1cf9f42 "SUNRPC: Rebalance a kref in authgss.c" added a krefget&gssauth-kref call to balance the gssputauth done in gssreleasemsg, but forgot to add a...

CVE-2026-45964

In CVE-2026-45964, the Linux kernel SUNRPC path gss_alloc_msg leaks a kref on the error path when kstrdup_const() fails; a corresponding kref_put() that would release gss_auth was missing. The described fix adds a forward declaration for gss_free_callback() and calls kref_put() in the err_put_pip...