01 Record

CVE-2026-45870

SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 5.7% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-25.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-27 12:15Z3 MO AGO

Last updated

2026-05-27 12:15Z3 MO AGO

Reserved

2026-05-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant
CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

85bfc5cdfdb7b5ef2982038bbb05d993d49b3eb93beaeec389bb9c58f9b13742

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1d658336b05f8697d6445834f8867f8ad5e4f735 to < c81431b1b9fbd21e9a5a9211b5517b7295d18e6a, 1d658336b05f8697d6445834f8867f8ad5e4f735 to < caf7eff432e91a9eba1c79fa545c2f54be15d62b, 1d658336b05f8697d6445834f8867f8ad5e4f735 to < 64303b92d94c0c7845a273acd8d84b796d6f1db7, 1d658336b05f8697d6445834f8867f8ad5e4f735 to < df10f23defff22c8d55fe6db74f6e4ce927145bf, 1d658336b05f8697d6445834f8867f8ad5e4f735 to < b4af3806846778799cd4ab0766dc18341e777264, 1d658336b05f8697d6445834f8867f8ad5e4f735 to < d79b9097a6a2b91471b40755f1225364be5d85ff, 1d658336b05f8697d6445834f8867f8ad5e4f735 to < 3b56eb90feb8a3709417f5624f3871847d42bcb1, 1d658336b05f8697d6445834f8867f8ad5e4f735 to < 3e6397b056335cc56ef0e9da36c95946a19f5118, 3.10—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/c81431b1b9fbd21e9a5a9211b5517b7295d18e6a
git.kernel.orghttps://git.kernel.org/stable/c/caf7eff432e91a9eba1c79fa545c2f54be15d62b
git.kernel.orghttps://git.kernel.org/stable/c/64303b92d94c0c7845a273acd8d84b796d6f1db7
git.kernel.orghttps://git.kernel.org/stable/c/df10f23defff22c8d55fe6db74f6e4ce927145bf
git.kernel.orghttps://git.kernel.org/stable/c/b4af3806846778799cd4ab0766dc18341e777264
git.kernel.orghttps://git.kernel.org/stable/c/d79b9097a6a2b91471b40755f1225364be5d85ff
git.kernel.orghttps://git.kernel.org/stable/c/3b56eb90feb8a3709417f5624f3871847d42bcb1
git.kernel.orghttps://git.kernel.org/stable/c/3e6397b056335cc56ef0e9da36c95946a19f5118

01 Record index

CVE-2026-45870

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-45870

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References