Threats tagged 'ghsa-c9g4-75m8-v388'

A vulnerability in the Linux kernel's sunrpc subsystem causes a null pointer dereference when processing a zero-length checksum. Specifically, in the function xdr_stream_decode_opaque_auth(), a zero-length checksum leads to checksum.data being set to NULL, which triggers a null pointer dereference in gss_krb5_verify_mic_v2(). This issue has been resolved by ensuring checksum.len is not less than the required minimum XDR_UNIT.