MEDIUM 5.9 Microsoft

CVE-2026-40356

In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Microsoft Security Update 2026-Apr: In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, possibly causing the process to terminate in parse_message.

Affected Products

References

Published: 2026-04-14 · Source: Microsoft · Feed updated: 2026-08-10
This medium severity vulnerability with a CVSS score of 5.9 was published on 2026-04-14 via Microsoft. Affected: azl3 krb5 1.21.3-3 on Azure Linux 3.0, cbl2 krb5 1.19.4-5 on CBL Mariner 2.0, azl3 krb5 1.21.3-4 on Azure Linux 3.0.
vulnfeed aggregates 9044 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.