CVE-2026-104044

Name of the Vulnerable Software and Affected Versions sssd (affected versions not specified)

Description A flaw in sssd allows a local attacker to cause a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM) request while passkey authentication is active. The issue stems from a missing state validation check during passkey Kerberos handling, which leads the PAM responder to dereference an uninitialized pointer and crash, thereby disrupting authentication services on the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.