CVE-2026-107778

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 (krb5) versions prior to 1.22.3

Description A NULL pointer dereference occurs in the make cred list() function within rd cred.c. Authenticated Kerberos clients can trigger this by sending mismatched KRB-CRED arrays. Specifically, an attacker can send forwarded credentials containing more tickets than ticket info entries through the gss accept sec context() function, leading to a crash of GSS-API acceptor services and resulting in a denial of service.

Recommendations Update MIT Kerberos 5 (krb5) to version 1.22.3 or later.