Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45870

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths The gssx_dec_ctx(), gssx_dec_status(), and gssx_dec_name() functions allocate memory via gssx_dec_buffer(), which calls kmemdup(). When a subsequent decode operation fails, these functions return immediately without freeing previously allocated buffers, causing memory leaks. The leak in gssx_dec_ctx() is particularly relevant because the caller (gssp_accept_sec_co
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a98f4a64c9e8566c4a8b42e87ebe26ae6cac2e4c2b499c8f4ebbceb44d6c8caa
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/sunrpc/auth_gss/gss_rpc_xdr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.10"},{"lessThan":"3.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/sunrpc/auth_gss/gss_rpc_xdr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c81431b1b9fbd21e9a5a9211b5517b7295d18e6a","status":"affected","version":"1d658336b05f8697d6445834f8867f8ad5e4f735","versionType":"git"},{"lessThan":"caf7eff432e91a9eba1c79fa545c2f54be15d62b","status":"affected","version":"1d658336b05f8697d6445834f8867f8ad5e4f735","versionType":"git"},{"lessThan":"64303b92d94c0c7845a273acd8d84b796d6f1db7","status":"affected","version":"1d658336b05f…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/sunrpc/auth_gss/gss_rpc_xdr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.10"},{"lessThan":"3.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/sunrpc/auth_gss/gss_rpc_xdr.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c81431b1b9fbd21e9a5a9211b5517b7295d18e6a","status":"affected","version":"1d658336b05f8697d6445834f8867f8ad5e4f735","versionType":"git"},{"lessThan":"caf7eff432e91a9eba1c79fa545c2f54be15d62b","status":"affected","version":"1d658336b05f8697d6445834f8867f8ad5e4f735","versionType":"git"},{"lessThan":"64303b92d94c0c7845a273acd8d84b796d6f1db7","status":"affected","version":"1d658336b05f…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/3b56eb90feb8a3709417f5624f3871847d42bcb1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/3e6397b056335cc56ef0e9da36c95946a19f5118"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/64303b92d94c0c7845a273acd8d84b796d6f1db7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b4af3806846778799cd4ab0766dc18341e777264"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/c81431b1b9fbd21e9a5a9211b5517b7295d18e6a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/caf7eff432e91a9eba1c79fa545c2f54be15d62b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/d79b9097a6a2b91471b40755f1225364be5d85ff"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/df10f23defff22c8d55fe6db74f6e4ce927145bf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:518d533f3fb6d14faf2c2d013e894d5b07d19ab8c0c8dd9694622ca4a96a9b49 · sha256:85bfc5cdfdb7b5ef… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer