CVE-2026-104035

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A flaw in the Kerberos Credential Manager (KCM) responder allows a local user to trigger a Denial of Service (DoS) by maintaining a persistent connection and repeatedly storing and destroying credentials. The service fails to release cached objects from memory during the removal of credentials, leading to continuous memory growth that exhausts available system resources and renders the service unresponsive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.