Skip to content
OpenAdvisories
High · 7.1 CVE-2025-24528 EUVD-2026-2883GHSA-wrjh-fhfj-xhfm

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() i…

Published Jan 16, 2026 · Updated Jan 16, 2026 · Assigned by mitre

Vendor: MIT Product: Kerberos 5 Package: krb5 Package: krb5 Package: krb5 Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In MIT Kerberos 5 (aka krb5) before 1.22 (with incremental propagation), there is an integer overflow for a large update size to resize() in kdb_log.c. An authenticated attacker can cause an out-of-bounds write and kadmind daemon crash.

Affected products

VendorProductAffectedFixed
MIT Kerberos 5 1.7 – < 1.22 1.22

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 krb5 1.21.3-5 —
Debian 13 krb5 1.21.3-5 —
Debian 12 krb5 1.20.1-2+deb12u3 —
Debian 11 krb5 1.18.3-6+deb11u6 DLA-4065-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 25.10 krb5 1.21.3-4ubuntu2 —
Ubuntu 24.04 LTS krb5 1.20.1-6ubuntu2.5 USN-7314-1
Ubuntu 22.04 LTS krb5 1.19.2-2ubuntu0.6 USN-7314-1
Ubuntu 20.04 LTS krb5 1.17-6ubuntu4.9 USN-7314-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS krb5 No fix yet —
Ubuntu Pro 16.04 LTS krb5 No fix yet —
Ubuntu Pro 14.04 LTS krb5 No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 krb5 +7 1.21.1-6.el9 RHSA-2025:7067
RHEL 8 krb5 +7 1.18.2-31.el8_10 RHSA-2025:2722
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 7 ELS krb5 +7 1.15.1-55.el7_9.4 RHSA-2025:1352

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 libkadm5 +6 1.21.1-6.el9 ALSA-2025:7067
AlmaLinux 8 libkadm5 +6 1.18.2-31.el8_10 ALSA-2025:2722

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 krb5 1.21.1-6.el9 RLSA-2025:7067
Rocky Linux 8 krb5 1.18.2-31.el8_10 RLSA-2025:2722

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 crypto-policies 20230920.570ea89-150600.3.3.1 SUSE-SU-2025:0401-1
SLES 15 SP6 krb5 1.20.1-150600.11.8.1 SUSE-SU-2025:0401-1
SLES 12 SP5 krb5 1.16.3-46.18.1 SUSE-SU-2025:0351-1
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLE Micro 6.1 krb5 1.21.3-slfo.1.1_2.1 SUSE-SU-2025:20303-1
SLE Micro 6.0 krb5 1.20.1-6.1 SUSE-SU-2025:20153-1
SLE Micro 5.5 krb5 1.20.1-150500.3.12.1 SUSE-SU-2025:0304-1
SLE Micro 5.4 krb5 1.19.2-150400.3.15.1 SUSE-SU-2025:0343-1
SLE Micro 5.3 krb5 1.19.2-150400.3.15.1 SUSE-SU-2025:0343-1
SLE Micro 5.2 krb5 1.19.2-150300.22.1 SUSE-SU-2025:0822-1
SLE Micro 5.1 krb5 1.19.2-150300.22.1 SUSE-SU-2025:0822-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed krb5 1.21.3-2.1 openSUSE-SU-2025:14736-1
openSUSE Leap 15.6 crypto-policies 20230920.570ea89-150600.3.3.1 SUSE-SU-2025:0401-1
openSUSE Leap 15.6 krb5 1.20.1-150600.11.8.1 SUSE-SU-2025:0401-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 libkadm5 +6 1.21.3-6.amzn2023.0.1 ALAS2023-2025-1173
Amazon Linux 2 libkadm5 +6 1.15.1-55.amzn2.2.9 ALAS2-2025-2985

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 krb5 1.21.3-3 —
Azure Linux 2 (CBL-Mariner) krb5 1.19.4-5 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 libkadm5 +6 1.21.1-6.0.1.el9 ELSA-2025-7067
Oracle Linux 8 libkadm5 +6 1.18.2-31.0.1.el8_10 ELSA-2025-2722
Oracle Linux 7 libkadm5 +6 1.15.1-55.0.9.el7_9 ELSA-2025-1352

Advisories 25

References