CVE-2026-104030

A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.

Red Hat has rated this vulnerability as Moderate because it enables a local attacker to cause a denial of service in the SSSD PAM responder, interrupting authentication services without allowing privilege escalation or code execution. In standard Red Hat Enterprise Linux deployments, the PAM responder socket is accessible to local unprivileged processes to facilitate user authentication. Although exploitation requires local system access to submit malformed authentication requests, the resulting service termination affects system availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.