PT-2026-96331

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gss krb5 unwrap v2 sets buf-len to a logical length, which can be much smaller than head0.iov len the allocated receive-page capacity. It then calls xdr buf trim with a...

PT-2026-96420

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: xdr buf trim: clamp buf-len to avoid underflow xdr buf trim trims len bytes from the tail of an xdr buf by walking the tail, pages, and head iovecs. Each per-section step uses min t so it never removes more bytes than tha...