CVE-2026-104036

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A flaw exists in the SSSD NFS idmap plugin. When retrieving cached user or group names, the plugin identifies if an entry exceeds the destination buffer size but continues to copy data instead of aborting. A local attacker can trigger an out-of-bounds write by requesting identity lookups that resolve to oversized cached entries. This typically results in a Denial of Service (DoS) by crashing the identity mapping service and may lead to the corruption of adjacent process memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.