Known Vulnerabilities for Krb5 by MIT
Listed below are 10 of the newest known vulnerabilities associated with "Krb5" by "MIT".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-107778 json | MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authent... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-107708 json | MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that return... | Not Provided | 2026-10-08 | 2026-10-14 |
| CVE-2026-89550 json | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: enforce krb5 token minimum length ... | Not Provided | 2026-09-11 | 2026-10-19 |
| CVE-2026-89541 json | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length checks gss_u... | Not Provided | 2026-09-11 | 2026-10-19 |
| CVE-2026-89538 json | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec fie... | Not Provided | 2026-09-11 | 2026-10-19 |
| CVE-2026-80924 json | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for derived key buf... | Not Provided | 2026-09-09 | 2026-10-19 |
| CVE-2026-64439 json | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at ... | Not Provided | 2026-07-25 | 2026-08-17 |
| CVE-2026-64208 json | In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify l... | Not Provided | 2026-07-24 | 2026-08-05 |
| CVE-2026-40355 json | In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_contex... | Not Provided | 2026-04-28 | 2026-10-15 |
| CVE-2026-31392 json | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix krb5 mount with username option Custom... | Not Provided | 2026-04-03 | 2026-10-19 |