CVE Explorer

CVE-2026-45964

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path Commit 5940d1cf9f42 ("SUNRPC: Rebalance a kref in auth_gss.c") added a kref_get(&gss_auth->kref) call to balance the gss_put_auth() done in gss_release_msg(), but forgot to add a corresponding kref_put() on the error path when kstrdup_const() fails. If service_name is non-NULL and kstrdup_const() fails, the function jumps to err_put_pipe_version which calls put_pipe_v

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:e630ee065dc791f07a34eb7281ddf0df56609201c64ad8057b2510588dabc4e6

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/sunrpc/auth_gss/auth_gss.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3b2b6c42070ce4204936288253baf101e995c2d3","status":"affected","version":"5940d1cf9f42f67e9cc3f7df9eda39f5888d6e9e","versionType":"git"},{"lessThan":"b559be2ec6cdb2e9c2c36c23fbbd4690d8a5c3f7","status":"affected","version":"5940d1cf9f42f67e9cc3f7df9eda39f5888d6e9e","versionType":"git"},{"lessThan":"a1bc9561b617ec7e2d09e6c134d1db8fcf9ca4a6","status":"affected","version":"5940d1cf9f42f67…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/sunrpc/auth_gss/auth_gss.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.2"},{"lessThan":"5.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/3b2b6c42070ce4204936288253baf101e995c2d3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/655c9ba9915f05266998dbbf4b76b3c79b8a70aa"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/a1bc9561b617ec7e2d09e6c134d1db8fcf9ca4a6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/a2d4e9a76de0b2178001214ba5de5bf94a7354aa"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/b559be2ec6cdb2e9c2c36c23fbbd4690d8a5c3f7"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/c20f925214249bb4fc04f7e197bea142a6438af6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/dd2fdc3504592d85e549c523b054898a036a6afe"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/e464e26b2457005c87e158570498274b9f3b90c7"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:b3b037559186f333eeb76e9ad8529c35733bf26d2c3e66a5c7cc5dbd182de080 · sha256:8c327ea8f8a91aa7… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer