CVE-2026-40356 | MIT Kerberos 5 up to 1.22.2 /etc/gss/mech gss_accept_sec_context integer underflow

A vulnerability, which was classified as critical, has been found in MIT Kerberos 5 up to 1.22.2. The impacted element is the function gss_accept_sec_context of the file /etc/gss/mech. The manipulation leads to integer underflow.

This vulnerability is uniquely identified as CVE-2026-40356. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.