CVE-2026-89539
kernel: SUNRPC: reject duplicate CREDS_VALUE options
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 11, 2026
Updated · September 29, 2026
Description
A flaw was found in the SUNRPC subsystem of the Linux kernel. The gssx_dec_option_array() function, responsible for decoding options, does not correctly handle replies containing duplicate CREDS_VALUE entries. This oversight causes the system to allocate memory for credentials multiple times without releasing previous allocations, leading to a memory leak. A remote attacker could exploit this to consume system resources.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime