CVE-2026-104038

Name of the Vulnerable Software and Affected Versions sssd (affected versions not specified)

Description A flaw exists where a remote attacker can trigger a denial of service (DoS) by submitting a certificate that lacks an expected Security Identifier (SID) extension. In environments using SID-based certificate mapping rules, the service does not verify the presence of the extension before processing, leading to a process crash during lookup or authentication operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.