medium6.4
CVE-2026-12610
A flaw was found in sssd.
Impact
A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fedoraproject | Sssd | All versions |
| Redhat | Enterprise Linux | Versions 8.0, 9.0, 10.0 |