CVE-2026-80924
High
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for derived key buffers crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum() free the buffer holding the freshly derived keys with plain kfree(), leaving the key material behind in the freed slab object.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Linux
PublishedSep 9, 2026
First seenSep 9, 2026
How to fix
Update
- Linux Linux731a5b6fb4c1705f9405d9029dd64ea81e336207, 91b96dc9cc250cd16751f53de525cf3442ca0962, a1bf79365794783b19f5b09e8a23f7ee311e8931, f7d53dd3f267e46a784f219a75072f2f400d42b9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3936f02bf2d3308a7359dd37dd96cd60603d8170 ≤ v < 731a5b6fb4c1705f9405d9029dd64ea81e336207, 3936f02bf2d3308a7359dd37dd96cd60603d8170 ≤ v < 91b96dc9cc250cd16751f53de525cf3442ca0962, 3936f02bf2d3308a7359dd37dd96cd60603d8170 ≤ v < a1bf79365794783b19f5b09e8a23f7ee311e8931, 3936f02bf2d3308a7359dd37dd96cd60603d8170 ≤ v < f7d53dd3f267e46a784f219a75072f2f400d42b9, 6.15 | 731a5b6fb4c1705f9405d9029dd64ea81e336207, 91b96dc9cc250cd16751f53de525cf3442ca0962, a1bf79365794783b19f5b09e8a23f7ee311e8931, f7d53dd3f267e46a784f219a75072f2f400d42b9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.