Vulnerabilities

TI-2026-69019 CVE-2026-104045 · GHSA-8wp7-x59q-g576

Race condition in SSSD autofs responder enables denial of service

MEDIUM 55

A flaw was found in SSSD.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00125 Published 2026-10-06 Fix deferred CWE-772

TI-2026-69020 CVE-2026-104046 · GHSA-35vq-gvvv-mccw

SSSD IdP pre-authentication state leaks memory, enabling denial of service

LOW 27

A flaw was found in SSSD (System Security Services Daemon).

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0016 Published 2026-10-06 Fix deferred CWE-770

TI-2026-68594 CVE-2026-104048 · GHSA-474r-m56w-5qgh

Authorization bypass in SSSD HBAC rules via username collision

HIGH 70

A flaw was found in SSSD.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00301 Published 2026-10-06 Fix deferred CWE-1025

TI-2026-68593 CVE-2026-104047 · GHSA-g6q7-jchg-6v7f

Query injection in SSSD Entra ID lookups exposes directory data

LOW 23

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.3 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-140

TI-2026-68550 CVE-2026-88252 · GHSA-qj34-9w8c-jph5

Denial of service in sssd responder via connection retry loop

MEDIUM 58

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-835

TI-2026-68280 CVE-2026-104039 · GHSA-6ffw-v8mm-gqgh

Expired pointer use in SSSD PAM responder enables denial of service

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00131 Published 2026-10-06 Fix deferred CWE-825

TI-2026-68273 CVE-2026-104032 · GHSA-9hff-39jv-57mx

Denial of service in SSSD via unprivileged autofs cache invalidation

MEDIUM 58

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00096 Published 2026-10-06 Fix deferred CWE-408

TI-2026-68272 CVE-2026-104031 · GHSA-p584-gvqg-45c6

Memory leak in SSSD autofs responder allows denial of service

LOW 23

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00096 Published 2026-10-06 Fix deferred CWE-772

TI-2026-67883 CVE-2026-104029 · GHSA-2chf-ff75-p482

Out-of-bounds read in SSSD autofs responder causes denial of service

LOW 24

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00129 Published 2026-10-05 Fix deferred CWE-125

TI-2026-67884 CVE-2026-104030 · GHSA-rwfv-xr9p-g8w4

Out-of-bounds read in SSSD passkey parsing causes denial of service

LOW 24

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0012 Published 2026-10-05 Fix deferred CWE-125

TI-2026-61496 CVE-2026-90462 · GHSA-58vh-w7mf-682f

Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization

MEDIUM 58

A flaw was found in SSSD.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0018 Published 2026-09-22 Fix deferred CWE-280

TI-2026-61838 CVE-2026-90996 · GHSA-xg93-wm7f-rmcx

Sssd: sssd: denial of service in nss responder via crafted zero-length requests

LOW 24

A flaw was found in sssd.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00128 Published 2026-09-14 Fix deferred CWE-191

TI-2026-61837 CVE-2026-90995 · GHSA-q5vg-f923-829p

Sssd: sssd: local denial of service due to null pointer dereference in pam responder

LOW 24

A flaw was found in SSSD (System Security Services Daemon).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00135 Published 2026-09-14 Fix deferred CWE-476

TI-2026-15935 CVE-2026-19617 · GHSA-2f2v-c79p-8x4x

Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser

LOW 24

A flaw was found in libdm.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00158 Published 2026-08-14 Partial fix · 2.03.43-1.hum1 CWE-770

TI-2026-15900 CVE-2026-19548 · GHSA-j77f-3ffj-4jg4

Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

LOW 24

Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00167 Published 2026-08-12 Partial fix · 2.46.1-1.4.hum1 CWE-416

TI-2026-49901 CVE-2026-71227 · GHSA-c5mv-c5vm-62w5

Infinite loop in Stephan Muelle libkcapi

LOW 23

A flaw was found in libkcapi.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00197 Published 2026-08-05 Partial fix · 1.5.1, 1.5.1-1.el10_2 +5 CWE-835

TI-2026-49900 CVE-2026-71226 · GHSA-rg4h-x337-qh8m

Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path

LOW 31

Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers.

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00147 Published 2026-08-05 Partial fix · 1.5.1, 1.5.1-1.el10_2 +7 CWE-416

TI-2026-49899 CVE-2026-71225 · GHSA-qv62-qmw8-96h9

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

LOW 29

A flaw was found in libkcapi.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00345 Published 2026-08-05 Partial fix · 1.5.1, 1.5.1-1.el10_2 +5 CWE-330

TI-2026-48329 CVE-2026-68743 · GHSA-3v6f-w66g-3mv6

Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1

LOW 30

A flaw was found in SSSD.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00133 Published 2026-08-04 Fix deferred CWE-125

TI-2026-48330 CVE-2026-68744 · GHSA-xxfg-88q3-gxgm

Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply

LOW 15

A flaw was found in SSSD.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00133 Published 2026-08-04 Fix deferred CWE-908

TI-2026-15176 CVE-2026-18477 · GHSA-v7fx-gjvh-347c

Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape

LOW 19

A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the att…

CVSS 3.1MEDIUM 4.4 Local Low privileges User interaction EPSS 0.00104 Published 2026-08-03 Partial fix · 2:1.35-13.el10_2, 2:1.30-13.el8_10 +8 CWE-367

TI-2026-15195 CVE-2026-18508 · GHSA-4f5j-wqjr-hx49