A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.38/7.1.3. This issue affects the function
krb5_aead_encrypt/krb5_aead_decrypt/rfc8009_encrypt/rfc8009_decrypt of the file rfc3961_simplified.c of the component Crypto. This manipulation causes use after free.
This vulnerability appears as CVE-2026-64439. The attack may be initiated remotely. There is no available exploit.
It is suggested to upgrade the affected component.
