Live › vulnerability › CVE-2026-116497
Go to dashboardA request to gssproxy's GSSX_INIT_SEC_CONTEXT call with the target_name field absent causes a NULL pointer dereference that crashes the daemon. Any local user can send it through the Unix socket without authentication, and the daemon does not restart on its own, which also disrupts services that depend on it such as Kerberized NFS and IdM.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 16:02 UTC. All times on this page are UTC.
Systems running the gssproxy daemon with its Unix socket reachable by local users, including hosts that serve Kerberized NFS or IdM. Hosts where gssproxy is not installed or not running are not affected. The sources do not give affected versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A NULL pointer dereference vulnerability was found in gssproxy. When a GSSX_INIT_SEC_CONTEXT request is received with the target_name field absent, the daemon dereferences the resulting NULL pointer and crashes. The request requires no authentication, allowing any local user to crash the gssproxy daemon via its Unix socket. The daemon does not automatically restart, resulting in a persistent denial of service that also affects dependent services such as Kerberized NFS and IdM.
This page as .md · .json · in your agent: get_signal("CVE-2026-116497")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.