CVE-2026-89541

CVE-2026-89541 affects the Linux kernel's SUNRPC subsystem in the function gss_unwrap_resp_priv(). The root cause is a u32 integer overflow in the RPCSEC_GSS opaque length validation: when opaque_len is near 0xffffffff, the sum offset + opaque_len wraps to a small value, bypassing the bound check...