The Linux kernel's krb5 crypto implementation improperly frees buffers containing freshly derived keys using the standard kfree() function rather than kfree_sensitive(). This results in key material remaining in freed slab objects, potentially exposing sensitive cryptographic keys. The vulnerability affects the functions crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum(). The issue has been resolved by switching to kfree_sensitive() to securely erase key buffers before freeing.

The vulnerability could lead to exposure of sensitive cryptographic key material in memory, which may allow an attacker to recover keys and compromise confidentiality. The CVSS score of 7.5 (high) reflects the network attack vector with low complexity and no privileges required, and a high impact on confidentiality. There is no indication of impact on integrity or availability.

A fix has been implemented in the Linux kernel to use kfree_sensitive() for freeing derived key buffers, securely erasing sensitive key material. Users should apply the official Linux kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the specific patch and update instructions.