Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Krb5 Integer Underflow Risk on Linux
published 4 months ago
Summary
This update fixes a security issue in Krb5 that could allow an attacker to read sensitive data on a Linux system. Affected users should apply this update to ensure their systems are secure.
What to do
- Update suse krb5 to version 1.20.1-9.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Micro 6.0 | suse | krb5 |
< 1.20.1-9.1 Fix: upgrade to 1.20.1-9.1
|
Original advisory text
Security update for krb5
This update for krb5 fixes the following issue
- CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
- CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of-bounds read (bsc#1268131).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-202622702-1/ Vendor Advisory
- https://bugzilla.suse.com/1268131 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-11850 URL
Timeline
Published7 Jul 2026
Updated23 Jul 2026
First seen23 Jul 2026
Sources
SUSE-SU-2026:22702-1 · OSV
Track software like this
Free during beta