CVE-2026-40356

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions prior to 1.22.3

Description An integer underflow leads to an out-of-bounds read when an application calls the gss accept sec context() function on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this issue, which may cause the process to terminate in parse message(). An integer underflow occurs when a subtraction results in a value smaller than the minimum representable value for that data type, often wrapping around to a very large positive number.

Recommendations Update to version 1.22.3 or later.