CVE-2026-48829 Null dereference in GNU SASL
A NULL pointer dereference in GNU SASL allows attackers to cause a denial of service via crafted DIGEST-MD5 tokens.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-48829?
CVE-2026-48829 is a high-severity vulnerability in GNU SASL, published on 24 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character. This occurs in lib/digest-md5/getsubopt.c.
Weakness: CWE-476
Which versions are affected by CVE-2026-48829?
Linux distribution packages (4)
gsasl SUSE:Linux Enterprise Server 16.0 | All versions | 2.2.1-160000.3.1 |
gsasl SUSE:Linux Enterprise Server for SAP applications 16.0 | All versions | 2.2.1-160000.3.1 |
gsasl openSUSE:Leap 16.0 | All versions | 2.2.1-160000.3.1 |
gsasl openSUSE:Tumbleweed | All versions | 2.2.3-1.1 |
How do I fix CVE-2026-48829?
Upgrade to a fixed version.
Is CVE-2026-48829 being exploited?
There is no known exploitation of CVE-2026-48829 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-48829, GHSA-5px8-3qcf-qpm5, SUSE-SU-2026:22313-1, UBUNTU-CVE-2026-48829, USN-8356-1, openSUSE-SU-2026:10891-1 and 1 more.