From 1bc19c6c040f92cc35124885a4ee05beadb01b0a Mon Sep 17 00:00:00 2001 From: Nicolas Williams Date: Sun, 18 Jan 2026 16:09:05 -0600 Subject: [PATCH] kdc: Fix NULL deref --- kdc/fast.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/kdc/fast.c b/kdc/fast.c index 1f2ba665e..46a178b05 100644 --- a/kdc/fast.c +++ b/kdc/fast.c @@ -640,6 +640,12 @@ fast_unwrap_request(astgs_request_t r, goto out; if (r->explicit_armor_present) { + if (tgs_ac->remote_subkey == NULL) { + kdc_log(r->context, r->config, 2, + "FAST TGS armor remote subkey missing"); + ret = KRB5KDC_ERR_PREAUTH_FAILED; + goto out; + } ret = _krb5_fast_explicit_armor_key(r->context, &armorkey, tgs_ac->remote_subkey,