UBUNTU-CVE-2026-112321: High severity ubuntu/krb5 vulnerability
The AUTHGSSAPI handler in lib/rpc/svcauthgssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTHGSSAPIINIT requests that trigger authentication failures.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this denial-of-service issue?
Systems running kadmind with MIT Kerberos 5 are exposed because the memory exhaustion occurs in kadmind while processing AUTH_GSSAPI_INIT requests.
Does an attacker need credentials or user interaction?
No. The vector is network-accessible, requires no privileges or user interaction, and uses crafted AUTH_GSSAPI_INIT requests that cause authentication failures.
What is the practical impact of exploitation?
Repeated crafted requests can exhaust kadmind memory, resulting in denial of service. The provided information identifies no confidentiality or integrity impact.