CVE-2026-104032
Sssd: sssd: denial of service via unprivileged autofs cache invalidation
- State
- Published
- Severity
- 5.5 Medium
- Published
- Oct 6, 2026
- Updated
- Oct 16, 2026
- Reserved
- Oct 1, 2026
Description
A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of Service (DoS) from degraded automount availability and elevated resource consumption.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | redhat |
Weaknesses
- CWE-408 Incorrect Behavior Order: Early Amplification
Affected Products
| Product | Versions |
|---|---|
Red Hat Enterprise Linux 10Red Hat | |
Red Hat Enterprise Linux 6Red Hat | |
Red Hat Enterprise Linux 7Red Hat | |
Red Hat Enterprise Linux 8Red Hat | |
Red Hat Enterprise Linux 9Red Hat | |
Red Hat OpenShift Container Platform 4Red Hat | |
Red Hat OpenShift Container Platform 4Red Hat |
References
- https://access.redhat.com/security/cve/CVE-2026-104032vdb-entry
- RHBZ#2479381issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.