Description
A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory to leak, leading to excessive memory consumption that can disrupt or crash the autofs service.
Published: 2026-10-06
Score: 4.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

A local user can trigger a denial of service by exploiting a race condition in SSSD’s autofs responder. The flaw occurs between asynchronous completion of enumeration and map invalidation, allowing repeated concurrent requests to leak memory. The resulting memory exhaustion can disrupt or crash the autofs service, causing a service outage.

Affected Systems

The vulnerability impacts Red Hat Enterprise Linux releases 6, 7, 8, 9, and 10, as well as Red Hat OpenShift Container Platform 4. All affected versions are included under the listed Red Hat CPE entries.

Risk and Exploitability

The CVSS score of 4.7 indicates moderate severity, and the EPSS score is not available. The flaw is not listed in the CISA KEV catalog. Exploitation requires a local user with the ability to send map enumeration and invalidation requests to the autofs responder, so the attack vector is local. While it does not provide remote code execution, repeated use can lead to resource exhaustion and eventual service failure.

Generated by OpenCVE AI on October 6, 2026 at 23:36 UTC.

Remediation

Vendor Workaround

A real workaround exists: disable the SSSD autofs responder on systems where automount map integration via SSSD is not required. 1. Stop and mask the SSSD autofs socket and service: # systemctl stop sssd-autofs.socket sssd-autofs.service # systemctl mask sssd-autofs.socket sssd-autofs.service 2. If the 'services' line in /etc/sssd/sssd.conf explicitly lists 'autofs', remove 'autofs' from the comma-separated list and restart SSSD: # systemctl restart sssd Caveats: disabling the autofs responder prevents SSSD from serving automount maps, which will disrupt automated mounting of shares or user directories managed via SSSD. Restarting the SSSD service will briefly interrupt active authentication and directory lookup operations on the system. Where the autofs responder must remain enabled, restricting local access to the responder to trusted users, where deployment policy permits, and avoiding repeated map invalidation and enumeration cycles against large maps can reduce exposure. No released package fix is currently established for this issue.

OpenCVE Recommended Actions

  • Apply the latest Red Hat security update that patches the race condition in SSSD and autofs responder.
  • Restart both the sssd and autofs services after the update to clear any leaked memory and reinitialize the responder.
  • If an update is not yet available, temporarily disable the autofs service or restrict local user access until a fix is applied, and monitor memory usage to trigger automatic restarts if thresholds are exceeded.

Generated by OpenCVE AI on October 6, 2026 at 23:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Fedoraproject
Fedoraproject sssd
CPEs cpe:2.3:a:fedoraproject:sssd:2.12.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Vendors & Products Fedoraproject
Fedoraproject sssd

Fri, 09 Oct 2026 09:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat openshift Container Platform
Sssd
Sssd sssd
Vendors & Products Redhat openshift Container Platform
Sssd
Sssd sssd

Wed, 07 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 07 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Tue, 06 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory to leak, leading to excessive memory consumption that can disrupt or crash the autofs service.
Title Sssd: sssd: denial of service via race condition in autofs responder
First Time appeared Redhat
Redhat enterprise Linux
Redhat openshift
Weaknesses CWE-772
CPEs cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat openshift
References
Metrics cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Fedoraproject Sssd
Redhat Enterprise Linux Openshift Openshift Container Platform
Sssd Sssd
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-10-16T10:57:51.223Z

Reserved: 2026-10-01T17:25:32.876Z

Link: CVE-2026-104045

cve-icon Vulnrichment

Updated: 2026-10-07T15:22:59.779Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-06T21:17:04.163

Modified: 2026-10-13T15:35:49.377

Link: CVE-2026-104045

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-06T18:38:54Z

Links: CVE-2026-104045 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-09T08:31:30Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime