Medium USN-8355-1 1 CVE

sssd vulnerability

Published Jun 1, 2026 · Updated Jun 1, 2026

Ecosystem: Ubuntu

Summary

It was discovered that SSSD did not properly handle raw bytes in the PAM
passkey responder. A local attacker could possibly use this issue to cause
the SSSD PAM responder to crash, resulting in a denial of service.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 24.04 LTS 24.04:LTS	sssd	2.9.4-1.1ubuntu6.5
Ubuntu · 25.10	sssd	2.10.1-2ubuntu5.2
Ubuntu · 26.04 LTS 26.04:LTS	sssd	2.12.0-1ubuntu5.1

Vulnerabilities 1

Medium 5.5

CVE-2026-6245

Sssd: out-of-bounds read in the sssd

A flaw was found in the System Security Services Daemon (SSSD). The pam_passkey_child_read_data() function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string witho…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Apr 15, 2026

References

report
https://ubuntu.com/security/CVE-2026-6245