High severity7.5NVD Advisory· Published Sep 9, 2026· Updated Oct 19, 2026
CVE-2026-80924
CVE-2026-80924
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: krb5 - use kfree_sensitive() for derived key buffers
crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum() free the buffer holding the freshly derived keys with plain kfree(), leaving the key material behind in the freed slab object.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
>= 6.15.0, < 6.18.49+ 1 more
- (no CPE)range: >= 6.15.0, < 6.18.49
- (no CPE)range: < 7.2.5-1.1
Patches
Vulnerability mechanics
References
4News mentions
1- Linux Kernel: Twelve Vulnerabilities Disclosed Together on September 9, 2026Vypr Intelligence · Sep 9, 2026