Junglewise Threat Intelligence

CVE-2026-45870: Linux kernel memory leaks in SUNRPC auth_gss XDR decoding

CVE-2026-45870 · Severity: info · CVSS 0 · Published 2026-05-27

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's SUNRPC component could allow for memory leaks during network communication. SUNRPC is a protocol used for remote procedure calls, often in network file sharing environments. If an error occurs while processing specific security-related messages, the system fails to release allocated memory, which could eventually lead to system instability or performance degradation if repeatedly triggered.

Technical details

A memory leak vulnerability exists in the Linux kernel's SUNRPC auth_gss implementation. The functions gssx_dec_ctx(), gssx_dec_status(), and gssx_dec_name() allocate memory via gssx_dec_buffer() (which utilizes kmemdup()). When a subsequent XDR decoding operation fails, these functions return an error immediately without freeing previously allocated buffers. This is particularly impactful in gssp_accept_sec_context_upcall, where multiple buffer length fields are initialized to non-zero values, leading to unreferenced memory that cannot be reclaimed. The fix introduces proper error handling with goto-based cleanup to ensure all allocated buffers are freed upon failure.

Affected products

  • Linux Linux kernel versions prior to 6.13.y

Timeline

  • 2026-05-27: advisory: CVE-2026-45870 published in NVD
  • 2026-02-26: patched: Committed to stable Linux kernel tree

References

Related threats