CVE-2026-104030
MEDIUMCVSS 5.5Description
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.
Timeline
Published:October 5th, 2026 8:17 PM
Last modified:November 5th, 2026 4:17 PM
CVSS Scoring
CVSS v3: 5.5 (MEDIUM)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Software
From NVD CPE configuration data
Vendors
fedoraprojectredhat
Products
sssdopenshift_container_platformenterprise_linux
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute