CVE-2026-104029

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs responder process to crash, resulting in a denial of service (DoS).

Red Hat rates this vulnerability as a Low impact because exploitation is restricted to local attackers and primarily leads to responder termination or instability without granting privilege escalation or data leakage. The autofs responder in SSSD must be explicitly enabled and active for the vulnerable UNIX domain socket to be present. Additionally, any resulting crash affects only the autofs responder daemon rather than the core authentication services or entire operating system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.