False Positive? Kerberos "svcauth_gss_validate()" Buffer Overflow Vulnerability

Hi Folks,

Has anyone else had a deep dive into:

Kerberos "svcauth_gss_validate()" Buffer Overflow Vulnerability

Best Solution: Upgrade Kerberos 5 to 1.6.3.

Feedback from stakeholders: version in place is above 1.6.3 at 1.21.1-8.el9_6

Is it a false positive or is Rapid7 IVM correct?