CVE-2026-104041

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A flaw in the Name Service Switch (NSS) responder allows an unprivileged local user to trigger a Denial of Service (DoS) by repeatedly requesting lookups for nonexistent entries. The negative cache, which stores results of failed lookups, does not limit the total number of entries and only removes expired records when an existing key is rechecked. This causes the cache to grow without bound, leading to memory exhaustion and causing the responder to become unresponsive or terminate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.