Debian/linux: medium 5.5
gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls, leading to a memory leak. Note: This
Action: Upgrade linux to 5.7.6-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.6-1 | - |
Fixed versions
| 5.7.6-1 |
Sources
- osv: DEBIAN-CVE-2020-12656#Debian:13/linux
- https://security-tracker.debian.org/tracker/CVE-2020-12656
published · modified · JSON