CVE-2026-104046
published 2026-10-06CVE-2026-104046: A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in…
PriorityP425medium6.2CVSS 3.1
AVLACLPRNUINSUCNINAH
EPSS
0.13%
2.2th percentile
A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing unbounded memory consumption. This memory exhaustion can lead to a Denial of Service (DoS) by degrading or terminating SSSD authentication services.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | sssd | — | — |
| fedoraproject | sssd | — | — |
| openshift | ose-rhel-coreos-8 | — | — |
| openshift | ose-rhel-coreos-9 | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | openshift_container_platform | — | — |
CVSS provenance
nvdv3.16.2MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat6.2MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests
vendor_redhat·2026-10-06·CVSS 6.2
CVE-2026-104046 [MEDIUM] CWE-770 sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests
sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests
A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing unbounded memory consumption. This memory exhaustion can lead to a Denial of Service (DoS) by degrading or terminating SSSD authentication services.
Statement: This vulnerability is rated as having Moderate impact because it requires local access to a PAM authentication interface and specifically targets non-default configurations where identity provider (IdP) authentication is active. An unprivileged local at
GHSA
A flaw was found in SSSD (System Security Services Daemon).
ghsa_unreviewed·2026-10-06
CVE-2026-104046 [MEDIUM] CWE-770 A flaw was found in SSSD (System Security Services Daemon).
A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing unbounded memory consumption. This memory exhaustion can lead to a Denial of Service (DoS) by degrading or terminating SSSD authentication services.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-104046 sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests [fedora-all]
bugzilla·2026-10-06·CVSS 6.2
CVE-2026-104046 [MEDIUM] CVE-2026-104046 sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests [fedora-all]
CVE-2026-104046 sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
AI_ONLY_REPORT
package: sssd-2.12.0-1.el10
Summary: Unbounded `open_request_table` growth in IdP PREAUTH can cause
local DoS (memory exhaustion): repeated successful PREAUTH flows can retain
stale per-request state in a process-lifetime hash table without a size
bound, timeout, or proactive cleanup, allowing local memory exhaustion when
AUTHENTICATE is never completed.
Requirements to exploit: A local attacker must be able to reach a PAM
authentication s
Bugzilla
CVE-2026-104046 sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests
bugzilla·2026-05-18·CVSS 6.2
CVE-2026-104046 [MEDIUM] CVE-2026-104046 sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests
CVE-2026-104046 sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests
AI_ONLY_REPORT
package: sssd-2.12.0-1.el10
Summary: Unbounded `open_request_table` growth in IdP PREAUTH can cause
local DoS (memory exhaustion): repeated successful PREAUTH flows can retain
stale per-request state in a process-lifetime hash table without a size
bound, timeout, or proactive cleanup, allowing local memory exhaustion when
AUTHENTICATE is never completed.
Requirements to exploit: A local attacker must be able to reach a PAM
authentication surface handled by `sssd-2.12.0-1.el10` with IdP
authentication enabled, repeatedly drive PREAUTH to a successful
device-authorization reply, and stop before completing the matching
AUTHENTICATE step for each returned `user_code`.
Componen
2026-10-06
Published