CVE-2024-36288 | Linux Kernel up to 6.9.3 SUNRPC gss_free_in_token_pages pages[] infinite loop

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.9.3. Affected by this issue is the function gss_free_in_token_pages of the component SUNRPC. The manipulation of the argument pages[] leads to infinite loop.

This vulnerability is handled as CVE-2024-36288. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.