CVE-2026-104030 — Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks nul…
Published: 2026-10-05 · CVSS: 5.5 · CVSS 3.1
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7