What’s Vulnerable › Vulnerabilities

CVE-2026-104030: Sssd: sssd: denial of service via out-of-bounds read during passkey parsing

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-10-05 · updated 2026-10-28
• Weakness: CWE-125

Description

A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.

Affected products

• [UNKNOWN] sssd: 2.12.0 (and their updates)
• Red Hat Enterprise Linux: 7.0, 8.0, 9.0, 10.0 (and their updates)
• Red Hat OpenShift Container Platform 4.18: 4.0 (and their updates)
• Red Hat OpenShift Container Platform 4.18: all versions
• Red Hat Enterprise Linux 10: all versions
• Red Hat Enterprise Linux 7: all versions
• Red Hat Enterprise Linux 8: all versions
• Red Hat Enterprise Linux 9: all versions

References

• https://access.redhat.com/security/cve/CVE-2026-104030
• https://bugzilla.redhat.com/show_bug.cgi?id=2479429

Get alerted when CVE-2026-104030 or the next vulnerability affects your stack