Vulnerability · Published Oct 6, 2026 · Assigned by redhat
CVE-2026-104041Sssd: sssd: denial of service via unbounded negative cache growth
Medium 5.5
In plain English
A medium-severity resource allocation without limits in Red Hat Enterprise Linux 10 from Red Hat. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Official description
A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecked, the cache can grow without bound. This behavior can lead to memory exhaustion, resulting in a Denial of Service (DoS) as the responder becomes unresponsive or terminates.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | sssd | no fix listed | DEBIAN-CVE-2026-104041 |
| Debian:13 | sssd | no fix listed | DEBIAN-CVE-2026-104041 |
| Ubuntu:22.04:LTS | sssd | no fix listed | UBUNTU-CVE-2026-104041 |
| Ubuntu:24.04:LTS | sssd | no fix listed | UBUNTU-CVE-2026-104041 |
| Ubuntu:26.04:LTS | sssd | no fix listed | UBUNTU-CVE-2026-104041 |
| Ubuntu:26.10 | sssd | no fix listed | UBUNTU-CVE-2026-104041 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat OpenShift Container Platform 5 | see references |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://access.redhat.com/security/cve/CVE-2026-104041 vdb-entry, x_refsource_REDHAT
- RHBZ#2478864 issue-tracking, x_refsource_REDHAT