CVE-2026-104031

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A flaw exists in SSSD when the autofs responder service is enabled. Memory allocated during the processing of successful requests is not released until the client connection is terminated. A local attacker can cause memory exhaustion and a Denial of Service (DoS) by maintaining an open connection and repeatedly submitting valid requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.