Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

SUSE Important Krb5 Integer Underflow Heap Out-of-Bounds Fix 2026-22700-1

suse
Calendar Grey July 22, 2026
Scroller Suse
A critical update for krb5 is available addressing an integer underflow issue, crucial for maintaining system security.
SUSE released an important security update for krb5 to address CVE-2026-11850, which involves an integer underflow leading to a heap out-of-bounds read, affecting specific SUSE Lin...

Summary

## This update for krb5 fixes the following issue * CVE-2026-11850: integer underflow in berval2tl_data() leads to heap out-of- bounds read (bsc#1268131). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-785=1 ## Package List: * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * krb5-mini-debugsource-1.20.1-9.1 * krb5-mini-debuginfo-1.20.1-9.1 * krb5-mini-1.20.1-9.1

Topics%20covered

Topics Covered

security advisory SuSE important heap overflow krb5 integer underflow

References

* bsc#1268131

Cross-

* CVE-2026-11850

CVSS scores:

* CVE-2026-11850 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H

* CVE-2026-11850 ( NVD ): 5.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H

Affected Products:

* SUSE Linux Micro 6.0

* SUSE Linux Micro Extras 6.0

An update that solves one vulnerability can now be installed.

##

* https://www.suse.com/security/cve/CVE-2026-11850.html

* https://bugzilla.suse.com/show_bug.cgi?id=1268131

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:22700-1
Release Date: 2026-07-07T12:04:16Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE important heap overflow krb5 integer underflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.