PT-2026-90352

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-tgthint in free tgts When free tgts frees all structures in ce-tlist, ce-tgthint is left pointing to one of the freed cache dfs tgt structures. If ce-tgthint is not reset before it is used later, it results ...

Kerberos keytab utilities

Utilities for interacting with keytab files, which can store the hashed passwords of one or more principals. Discovered keytab files can be used to generate Kerberos Ticket Granting Tickets, or bruteforced offline. Keytab files can be also useful for decrypting Kerberos traffic using Wireshark...

Design/Logic Flaw

System Security Services Daemon SSSD before 1.0.1, when the krb5 authprovider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting...