CVE-2026-104045

Analyzed Analyzed - Analysis Complete

SSD Race Condition Leads to Denial of Service

Publication date: 2026-10-06

Last updated on: 2026-10-13

Assigner: redhat-SADP

Description

A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory to leak, leading to excessive memory consumption that can disrupt or crash the autofs service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-104045

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	openshift_container_platform	4.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux	10.0
fedoraproject	sssd	2.12.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-772	The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

Attack-Flow Graph

Executive Summary

This vulnerability is a Denial of Service (DoS) flaw in SSSD. A local attacker can exploit a race condition in the autofs responder by sending repeated concurrent map enumeration and invalidation requests. This causes memory leaks, leading to excessive memory consumption that disrupts or crashes the autofs service.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual memory usage or service crashes in the SSSD autofs responder. Check for repeated map enumeration and invalidation requests in logs. Use commands like 'sssd --genconf' to verify configuration and 'systemctl status sssd-autofs' to check service status. Monitor memory with 'top' or 'htop' for excessive usage by the autofs responder process.

Impact Analysis

If exploited, this vulnerability can cause system instability by consuming excessive memory, leading to service crashes or slowdowns. It primarily affects systems using SSSD with autofs, potentially disrupting file system access and user operations.

Compliance Impact

This vulnerability causes a Denial of Service (DoS) through memory leaks in the autofs service, which could disrupt critical system operations. While not directly tied to data breaches, prolonged service disruption may impact availability requirements under GDPR and HIPAA, potentially leading to compliance violations if systems fail to meet uptime or responsiveness standards.

Mitigation Strategies

Update SSSD to the latest patched version to address the race condition in the autofs responder. Monitor system memory usage for unusual spikes that may indicate exploitation attempts.

Hi! I’m here to help you understand CVE-2026-104045. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70