CVE-2026-104045

Name of the Vulnerable Software and Affected Versions SSSD (affected versions not specified)

Description A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause a memory leak, leading to excessive memory consumption that can disrupt or crash the autofs service. A race condition occurs when the timing or order of events affects the correctness of the software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.