CVE-2026-104045
Medium
Description
A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory to leak, leading to excessive memory consumption that can disrupt or crash the autofs service.
SeverityMedium
CVSS4.7
Exploit probability—
Product
Fedoraproject Sssd
PublishedOct 6, 2026
First seenOct 6, 2026
Weakness typeCWE-772CWE-772
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fedoraproject sssd | 2.12.0 | — |
| redhat openshift_container_platform | 4.0 | — |
| redhat enterprise_linux | 7.0, 8.0, 9.0, 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.