Description
A flaw was found in sssd, specifically within the PAM (Pluggable Authentication Modules) responder's protocol v1 parser, pam_parse_in_data(). A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This can trigger an out-of-bounds read, potentially causing the PAM responder to terminate or restart, leading to a local denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 5 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | sssd | No fix yet | — |
| Debian 13 | sssd | No fix yet | — |
| Debian 12 | sssd | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | sssd | No fix yet | — |
| Ubuntu 26.04 LTS | sssd | No fix yet | — |
| Ubuntu 24.04 LTS | sssd | No fix yet | — |
| Ubuntu 22.04 LTS | sssd | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | sssd | No fix yet | — |
| Ubuntu Pro 18.04 LTS | sssd | No fix yet | — |
| Ubuntu Pro 16.04 LTS | sssd | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | sssd | 2.10.2-150600.3.58.1 | SUSE-SU-2026:5079-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | sssd | 2.10.2-150600.3.58.1 | SUSE-SU-2026:5079-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | sssd +32 | 2.9.4-1.amzn2023.0.5 | ALAS2023-2026-3416 |
Advisories 3
- ALAS2023-2026-3416 Moderate: sssd security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Nov 9, 2026
- WID-SEC-2026-3363 System Security Services Daemon (SSSD): Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Nov 3, 2026
- SUSE-SU-2026:5079-1 Security update for sssd SUSE / openSUSE Security Updates · Nov 3, 2026
References
- https://access.redhat.com/security/cve/CVE-2026-90994 vdb-entry
- RHBZ#2479455 issue-tracking