CVE-2026-104030
published 2026-10-05CVE-2026-104030: A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication…
PriorityP422medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.12%
1.7th percentile
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | sssd | — | — |
| fedoraproject | sssd | — | — |
| openshift | ose-rhel-coreos-8 | — | — |
| openshift | ose-rhel-coreos-9 | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | openshift_container_platform | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing
vendor_redhat·2026-10-05·CVSS 5.5
CVE-2026-104030 [MEDIUM] CWE-125 sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing
sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.
Statement: Red Hat has rated this vulnerabili
GHSA
A flaw was found in sssd.
ghsa_unreviewed·2026-10-05
CVE-2026-104030 [MEDIUM] CWE-125 A flaw was found in sssd.
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-104030 sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing [fedora-all]
bugzilla·2026-10-05·CVSS 5.5
CVE-2026-104030 [MEDIUM] CVE-2026-104030 sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing [fedora-all]
CVE-2026-104030 sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
AI_ONLY_REPORT
package: sssd-2.12.0-1.el10
Summary: OOB Read in `sss_auth_unpack_passkey_blob` from Unbounded Parsing
of `SSS_AUTHTOK_TYPE_PASSKEY_KRB`: a malformed length-delimited passkey
blob that omits required in-bounds NUL terminators can be parsed past the
provided buffer, causing a locally triggerable out-of-bounds read and
likely denial of service in the SSSD PAM responder.
Requirements to exploit: Local access to a system using the SSSD PAM
responder, plu
Bugzilla
CVE-2026-104030 sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing
bugzilla·2026-05-18·CVSS 5.5
CVE-2026-104030 [MEDIUM] CVE-2026-104030 sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing
CVE-2026-104030 sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing
AI_ONLY_REPORT
package: sssd-2.12.0-1.el10
Summary: OOB Read in `sss_auth_unpack_passkey_blob` from Unbounded Parsing
of `SSS_AUTHTOK_TYPE_PASSKEY_KRB`: a malformed length-delimited passkey
blob that omits required in-bounds NUL terminators can be parsed past the
provided buffer, causing a locally triggerable out-of-bounds read and
likely denial of service in the SSSD PAM responder.
Requirements to exploit: Local access to a system using the SSSD PAM
responder, plus the ability to submit a crafted
`SSS_AUTHTOK_TYPE_PASSKEY_KRB` blob without in-bounds NUL terminators. The
available code context indicates this parsing occurs during PAM request
handling before later trust-based restrictions, so ordina
2026-10-05
Published