Unrated severityNVD Advisory· Published Sep 9, 2026

CVE-2026-80924

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: krb5 - use kfree_sensitive() for derived key buffers

crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum() free the buffer holding the freshly derived keys with plain kfree(), leaving the key material behind in the freed slab object.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernelllm-fuzzy

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/731a5b6fb4c1705f9405d9029dd64ea81e336207nvd
git.kernel.org/stable/c/91b96dc9cc250cd16751f53de525cf3442ca0962nvd
git.kernel.org/stable/c/a1bf79365794783b19f5b09e8a23f7ee311e8931nvd
git.kernel.org/stable/c/f7d53dd3f267e46a784f219a75072f2f400d42b9nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000