medium5.5
CVE-2026-104030
A flaw was found in sssd.
Impact
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fedoraproject | Sssd | Version 2.12.0 |
| Redhat | Openshift Container Platform | Version 4.0 |
| Redhat | Enterprise Linux | Versions 7.0, 8.0, 9.0, 10.0 |