CVE-2026-40355 | MIT Kerberos 5 up to 1.22.2 NegoEx Mechanism /etc/gss/mech gss_accept_sec_context null pointer dereference

A vulnerability categorized as problematic has been discovered in MIT Kerberos 5 up to 1.22.2. Affected by this vulnerability is the function gss_accept_sec_context of the file /etc/gss/mech of the component NegoEx Mechanism Handler. Executing a manipulation can lead to null pointer dereference.

This vulnerability is registered as CVE-2026-40355. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.