UBUNTU-CVE-2026-112314: High severity ubuntu/krb5 vulnerability

Published Nov 10, 2026

Updated

clnttcpcall() in lib/rpc/clnttcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatched XIDs or by triggering authentication retries.

Affected Software

8 affected components

ubuntu/krb5*

Event History

Nov 10, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are realistically exposed to this issue?

Systems using MIT Kerberos 5 GSS-RPC client programs that call the affected TCP RPC client code are exposed. The issue is in client-side processing, not described as requiring a vulnerable server.

What does an attacker need to do to trigger the denial of service?

An attacker can inject RPC replies with mismatched XIDs, or cause authentication retries. No privileges or user interaction are indicated by the supplied vector.

What is the expected impact of successful exploitation?

Successful exploitation causes a memory leak because RPC reply verifiers are not freed between retries. Repeated triggering can exhaust memory and cause denial of service in affected GSS-RPC client programs.

UBUNTU-CVE-2026-112314: High severity ubuntu/krb5 vulnerability

Affected Software

Event History

Frequently Asked Questions

Which systems are realistically exposed to this issue?

What does an attacker need to do to trigger the denial of service?

What is the expected impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which systems are realistically exposed to this issue?

What does an attacker need to do to trigger the denial of service?

What is the expected impact of successful exploitation?