kcmdump

KCM dumper Quick script to dump the KCM database used by SSSD and recover Kerberos tickets in the CCACHE format. Initially based on SSSDKCMExtractor and KCMTicketFormatter. Description Since version 2.0.0 2018-08-13, the back end storage of the KCM responder of SSSD does not encrypt the database...

CVE-2026-90143

A flaw was found in the Linux kernel's KCM Kernel Connection Multiplexer component. The kcmparsefuncstrparser function, which runs a BPF Berkeley Packet Filter parser, does not properly hold an RCU Read-Copy-Update read lock. This oversight can lead to BPF map operations triggering a warning,...

Linux kcm_attach() Heap Buffer Overflow

The vulnerability of the kcmattach function in the net/kcm/kcmsock.c component of the Linux operating system’s kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

CVE-2024-44946

Usage of the Enhanced PoC: Compile the PoC Code: bash Copy code gcc -o kcmuafpocadvanced kcmuafpocadvanced.c -pthread Run the PoC: bash Copy code sudo ./kcmuafpocadvanced The advanced PoC should simulate a highly complex race condition, potentially triggering the UAF vulnerability in the Linux...

EUVD-2026-94103

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

DEBIAN-CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connec...

CVE-2026-80048: Allocation of Resources Without Limits or Throttling

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

UBUNTU-CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connec...

Linux Distros Unpatched Vulnerability : CVE-2026-80048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request...

CVE-2026-80048 Sssd: sssd-kcm: local denial of service via excessive memory preallocation

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-80048 Sssd: sssd-kcm: local denial of service via excessive memory preallocation

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-80048

A flaw in the sssd-kcm component allows a local user or process capable of connecting to the sssd-kcm UNIX socket to trigger a Denial of Service (DoS) . An attacker can exploit this by sending a large request length header and subsequently stalling the connection, forcing the system to preallocat...

CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-104034

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager KCM responder during Kerberos ticket-granting ticket TGT renewal, where a deferred callback accesses memory that has already been released. An authenticated local user with a renewable Kerberos tick...

CVE-2026-104035 Sssd: sssd: denial of service via memory exhaustion in kcm responder

A flaw was found in SSSD. An issue in the Kerberos Credential Manager KCM responder allows a local user to cause a Denial of Service DoS by maintaining a persistent connection and repeatedly storing and destroying credentials. Because the service fails to release cached objects from memory when...

CVE-2026-104035

A flaw in the SSSD (System Security Services Daemon) within the Kerberos Credential Manager (KCM) responder allows for a Denial of Service (DoS) . A local user can trigger this by maintaining a persistent connection and repeatedly storing and destroying credentials. The root cause is that the ser...

CVE-2026-104035 Sssd: sssd: denial of service via memory exhaustion in kcm responder

A flaw was found in SSSD. An issue in the Kerberos Credential Manager KCM responder allows a local user to cause a Denial of Service DoS by maintaining a persistent connection and repeatedly storing and destroying credentials. Because the service fails to release cached objects from memory when...