Kerberos Vulnerabilities Lead to Denial of Service Risks

Multiple vulnerabilities were discovered in Kerberos, specifically an integer underflow in the berval2tl_data() function (CVE-2026-11850) and issues in the NegoEx mechanism parsing (CVE-2026-40355, CVE-2026-40356). These vulnerabilities could allow remote attackers to crash Kerberos, resulting in denial of service. The vulnerabilities affect various versions of the MIT Kerberos Network Authentication Protocol. Users are advised to update their systems to the latest package versions to mitigate these risks. Affected systems include Ubuntu 26.04 LTS and earlier versions. After applying updates, a restart of Kerberos is necessary to implement changes. The vulnerabilities were disclosed in July 2026, with prior CVE publications dating back to April and June 2026.

Key Points: • Kerberos has critical vulnerabilities that can lead to denial of service attacks. • Affected CVEs include CVE-2026-11850, CVE-2026-40355, and CVE-2026-40356. • Users must update their systems and restart Kerberos to apply necessary security fixes.