What is the CVSS score of EUVD-2026-75101?

EUVD-2026-75101 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-75101?

A memory safety defect in the Linux kernel's Kerberos subsystem leaves sensitive authentication credentials unwiped in freed memory, exposing organizations relying on NFSv4 or CIFS/SMB Kerberos…. A patch is available.

How to fix or mitigate EUVD-2026-75101?

Within 24 hours, identify all systems running affected Linux kernel versions (commit 3936f02b and later) with NFSv4 sec=krb5 or CIFS/SMB Kerberos authentication enabled by auditing kernel versions and filesystem mount options. Within 7 days, apply vendor-released kernel security patches through your Linux distribution's standard patch management process, prioritizing systems actively using Kerberos-authenticated file sharing. Within 30 days, verify complete patch deployment across all affected systems, document any unpatched systems with their compensating controls, and conduct a review of Kerberos authentication configuration to limit usage to high-value or high-security file shares.

Linux Kernel EUVD-2026-75101

| CVE-2026-80924 HIGH

2026-09-09 Linux

GHSA-v3j5-mp2x-9859

Information Disclosure Linux

7.5

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

4.7 MEDIUM

Recovering freed slab data requires local kernel memory access via crash dump or chained disclosure bug, making AV:L/AC:H/PR:L far more accurate than the assigned AV:N/PR:N.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Sep 10, 2026 - 06:23 vuln.today

CVSS changed

Sep 10, 2026 - 06:22 NVD

7.5 (HIGH)

Patch available

Sep 09, 2026 - 17:04 EUVD

CVE Published

Sep 09, 2026 - 16:19 cve.org

UNKNOWN (no severity yet)

CVE Published

Sep 09, 2026 - 16:19 cve.org

HIGH 7.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

crypto: krb5 - use kfree_sensitive() for derived key buffers

crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum() free the buffer holding the freshly derived keys with plain kfree(), leaving the key material behind in the freed slab object.

Articles & Coverage 1

News 4 New Linux Vulnerabilities - 4 High Severity Sep 10, 2026

AnalysisAI

The krb5 crypto subsystem in the Linux kernel fails to zero derived Kerberos key material before freeing memory buffers, leaving sensitive cryptographic keys resident in freed slab allocator objects. Both crypto_krb5_prepare_encryption() and crypto_krb5_prepare_checksum() call plain kfree() instead of the security-aware kfree_sensitive() wrapper, which would first zero the allocation. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Persist

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	The vulnerable code path is only exercised when Kerberos-authenticated kernel crypto services are active - specifically NFSv4 mounts configured with `sec=krb5`, `sec=krb5i`, or `sec=krb5p`, or CIFS/SMB shares using Kerberos authentication at the kernel level. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The formally assigned CVSS vector AV:N/AC:L/PR:N/UI:N/S:U/C:H scores 7.5 but substantially overstates exploitability for this vulnerability class. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	The primary fix is to upgrade to Linux kernel 6.18.49, 7.1.13, 7.2.3, or 7.3-rc1, each of which incorporates the one-line change replacing `kfree()` with `kfree_sensitive()` for the affected key buffers. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all systems running affected Linux kernel versions (commit 3936f02b and later) with NFSv4 sec=krb5 or CIFS/SMB Kerberos authentication enabled by auditing kernel versions and filesystem mount options. …

Threat intelligence, references, and detailed analysis are available after sign-in.