01 Record

CVE-2026-89544

SUNRPC: fix gssx_dec_option_array error path bugs

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

SUNRPC: fix gssx_dec_option_array error path bugs

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.59% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 48.2% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Received. NVD last modified this record on 2026-10-21.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-11 19:44Z1 MO AGO

Last updated

2026-10-21 12:47Z7 DAYS AGO

Reserved

2026-09-11

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

18e3505aa9da9fd013c321965b34cd913499a8a92d046355fcf8d808c0c34706

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux5e6013ae2c8d420faea553d363935f65badd32c3 to < 8c56a46db3b7523f13e167c3e2c6e3c47a87dcb3, 3cfcfc102a5e57b021b786a755a38935e357797d to < fb30241f7ccace372ee83017891549f23a715581, 3cfcfc102a5e57b021b786a755a38935e357797d to < 3ff45361e9469e85c0f86b8e7b82c63e50bab8ef, 3cfcfc102a5e57b021b786a755a38935e357797d to < f85a83774d7f4e2ac71c0c384df0dfb6f7d0179a, 3cfcfc102a5e57b021b786a755a38935e357797d to < 5e9a94539b1ec17a89177d952badfd0d844d694a, b97c37978ca825557d331c9012e0c1ddc0e42364, bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8, bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8, dd292e884c649f9b1c18af0ec75ca90b390cd044, 934212a623cbab851848b6de377eb476718c3e4c, 9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4, 996997d1fb2126feda550d6adcedcbd94911fc69, 6.6.23 to < 6.6.160, 4.19.311 to < 4.20, 5.4.273 to < 5.5, 5.10.214 to < 5.11, 5.15.153 to < 5.16, 6.1.83 to < 6.2, 6.7.11 to < 6.8, 6.8.2 to < 6.9, 6.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8c56a46db3b7523f13e167c3e2c6e3c47a87dcb3
git.kernel.orghttps://git.kernel.org/stable/c/fb30241f7ccace372ee83017891549f23a715581
git.kernel.orghttps://git.kernel.org/stable/c/3ff45361e9469e85c0f86b8e7b82c63e50bab8ef
git.kernel.orghttps://git.kernel.org/stable/c/f85a83774d7f4e2ac71c0c384df0dfb6f7d0179a
git.kernel.orghttps://git.kernel.org/stable/c/5e9a94539b1ec17a89177d952badfd0d844d694a

07 Fixed in

Debian 12

linux
No fix yet
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.