Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-112318

Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers

CVSS 3.1 6.5 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-112318

Published

The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointer dereference) by sending a policy request with an empty policy name that reaches authorization checks or logging code.

Read the publisher's advisory

Affected versions, risk and source history

Related advisories and sources

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-112318 · CVE overview and exploitation status

cve-program · CVE-2026-112318

Related changes

Linked by CVE identifier

Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers · Affected-version evidence changed · 13 Nov 2026
Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers · Affected-version evidence changed · 13 Nov 2026
Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers · Affected-version evidence changed · 12 Nov 2026
Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers · Affected-version evidence changed · 12 Nov 2026
Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers · Newly collected advisory · 9 Nov 2026