CVE-2026-85231 — libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding

A flaw was found in libtirpc. An authenticated remote attacker could exploit it by sending oversized wrapped data requests to an RPC service configured with RPCSEC_GSS integrity or privacy. This can cause unbounded memory allocation, resulting in denial of service through resource exhaustion and causing the service to become unstable or terminate.