CVE-2026-104045
published 2026-10-06CVE-2026-104045: A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous…
PriorityP417medium4.7CVSS 3.1
AVLACHPRLUINSUCNINAH
EPSS
0.10%
0.8th percentile
A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory to leak, leading to excessive memory consumption that can disrupt or crash the autofs service.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | sssd | — | — |
| fedoraproject | sssd | — | — |
| openshift | ose-rhel-coreos-8 | — | — |
| openshift | ose-rhel-coreos-9 | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | openshift_container_platform | — | — |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
sssd: sssd: Denial of Service via race condition in autofs responder
vendor_redhat·2026-10-06·CVSS 4.7
CVE-2026-104045 [MEDIUM] CWE-772 sssd: sssd: Denial of Service via race condition in autofs responder
sssd: sssd: Denial of Service via race condition in autofs responder
A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory to leak, leading to excessive memory consumption that can disrupt or crash the autofs service.
Statement: This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is limited to a local denial of service against the SSSD autofs responder and requires winning a race condition under sustained concurrent requests. In typical Red Hat deployments, the autofs responder is only active when S
GHSA
A flaw was found in SSSD.
ghsa_unreviewed·2026-10-06
CVE-2026-104045 [MEDIUM] CWE-772 A flaw was found in SSSD.
A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory to leak, leading to excessive memory consumption that can disrupt or crash the autofs service.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-104045 sssd: sssd: Denial of Service via race condition in autofs responder [fedora-all]
bugzilla·2026-10-06·CVSS 4.7
CVE-2026-104045 [MEDIUM] CVE-2026-104045 sssd: sssd: Denial of Service via race condition in autofs responder [fedora-all]
CVE-2026-104045 sssd: sssd: Denial of Service via race condition in autofs responder [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
AI_ONLY_REPORT
package: sssd-2.12.0-1.el10
Summary: Autofs responder DoS via leaked enumeration contexts after map
invalidation race: a race between async enumeration completion and
`auto.master` invalidation can leak `autofs_enum_ctx` objects and attached
results, leading to unbounded memory growth and denial of service in the
autofs responder.
Requirements to exploit: Local access to a system where the autofs
responder is enabled and reachable, plus the ability to issue
Bugzilla
CVE-2026-104045 sssd: sssd: Denial of Service via race condition in autofs responder
bugzilla·2026-05-18·CVSS 4.7
CVE-2026-104045 [MEDIUM] CVE-2026-104045 sssd: sssd: Denial of Service via race condition in autofs responder
CVE-2026-104045 sssd: sssd: Denial of Service via race condition in autofs responder
AI_ONLY_REPORT
package: sssd-2.12.0-1.el10
Summary: Autofs responder DoS via leaked enumeration contexts after map
invalidation race: a race between async enumeration completion and
`auto.master` invalidation can leak `autofs_enum_ctx` objects and attached
results, leading to unbounded memory growth and denial of service in the
autofs responder.
Requirements to exploit: Local access to a system where the autofs
responder is enabled and reachable, plus the ability to issue repeated
concurrent `SSS_AUTOFS_GETAUTOMNTENT` and
`SSS_AUTOFS_SETAUTOMNTENT("auto.master")` requests long enough to win the
race. Larger maps increase retained memory per leaked context.
Component affected: `sssd-2.12.0-1.el10`, autofs
2026-10-06
Published