Skip to content
OpenAdvisories
Medium RHSA-2026:80481 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Oct 14, 2026 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 krb5 0:1.22.2-10.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 krb5-devel 0:1.22.2-10.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 krb5-libs 0:1.22.2-10.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 krb5-pkinit 0:1.22.2-10.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 krb5-server 0:1.22.2-10.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 krb5-server-ldap 0:1.22.2-10.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 krb5-tests 0:1.22.2-10.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 krb5-workstation 0:1.22.2-10.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 krb5-xrealmauthz 0:1.22.2-10.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 libkadm5 0:1.22.2-10.3.hum1

Vulnerabilities 2

  • Medium 6.5
    CVE-2026-107778

    MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()

    MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more ti…

    MIT krb5 krb5 krb5 Debian Ubuntu Azure Linux Alpine
  • Medium 4.9
    CVE-2026-107708

    MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC

    MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S…

    MIT krb5 krb5 krb5 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-107778
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-107708
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80481.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2548262
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-107708
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-107708
  • article
    https://github.com/krb5/krb5
  • article
    https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/kdc/kdc_util.c#L639-L676
  • article
    https://github.com/krb5/krb5/commit/a88a18cafa1040a0c4f9c8d08288fc98831ec86d
  • article
    https://github.com/krb5/krb5/commit/f6e2c397ceda6467ebbaab8ed66d4895c9f1d6a7
  • article
    https://github.com/krb5/krb5/pull/1510
  • article
    https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-kdc-null-pointer-dereference-via-s4u2proxy-pac
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2548269
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-107778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-107778
  • article
    https://github.com/krb5/krb5/blob/krb5-1.22.2-final/src/lib/krb5/krb/rd_cred.c#L77-L112
  • article
    https://github.com/krb5/krb5/commit/48afa9abb89ab2176bb20624d87d010b9984fc08
  • article
    https://github.com/krb5/krb5/commit/62196e2b269159a5465f5b8d0ed7cf6f29c3282a
  • article
    https://github.com/krb5/krb5/pull/1511
  • article
    https://www.vulncheck.com/advisories/mit-krb5-through-1.22.2-null-pointer-dereference-via-krb5-rd-cred