high7.5
CVE-2026-80924
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for derived key buffers crypto_krb5_prepare_encryption…
Impact
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for derived key buffers crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum() free the buffer holding the freshly derived keys with plain kfree(), leaving the key material behind in the freed slab object.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- https://git.kernel.org/stable/c/731a5b6fb4c1705f9405d9029dd64ea81e336207
- https://git.kernel.org/stable/c/91b96dc9cc250cd16751f53de525cf3442ca0962
- https://git.kernel.org/stable/c/a1bf79365794783b19f5b09e8a23f7ee311e8931
- https://git.kernel.org/stable/c/f7d53dd3f267e46a784f219a75072f2f400d42b9