CVE-2026-104037

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A flaw in SSSD allows a local attacker to cause a denial of service (DoS) by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This action triggers an integer underflow—a condition where a subtraction results in a value smaller than the minimum representable value—and an out-of-bounds memory read, leading to a crash of the responder process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.