CVE-2026-104039

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A local user can cause a denial of service (DoS) by disrupting system authentication services. The issue occurs during the handling of Generic Security Services Application Programming Interface (GSSAPI) authentication in the Pluggable Authentication Module (PAM) responder, where cached connection state is freed upon completion without clearing the reference pointer. An attacker can exploit this by sending an additional request over the same connection, leading the service to access invalid memory and terminate unexpectedly.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.