CVE-2026-104041 Sssd: sssd: denial of service via unbounded negative cache growth

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...

EUVD-2026-92911

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...

CVE-2026-104041

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...

CVE-2026-104041

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...

CVE-2026-104041: Allocation of Resources Without Limits or Throttling

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...

CVE-2026-104043: Out-of-bounds Read

A flaw was found in SSSD. A local attacker with access to the Name Service Switch NSS responder UNIX socket can trigger an integer underflow by sending a specially crafted request with an undersized packet header. This issue causes an out-of-bounds memory read during packet parsing, crashing the...

PT-2026-106295

A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch NSS responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecke...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: mac80211: The limit on vht mcs/nss in ieee80211parsetxradiotap has been adjusted. The maximum values for vht mcs and nss in ieee80211parsetxradiotap routine have been limited to fix the following warning reported by syzbot:...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, NSS

After accepting an untrusted certificate, handling an empty PKCS7 sequence as part of the certificate data could have led to a crash. This crash is believed to be exploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915 – Avoid nss underflow in mt7915mcugetstanss If a peer’s VHT/HE MCS map has no supported spatial streams all fields are 0x3, the loop exits with nss == 0, and the function returns a value of u8-1 255. This value...

Astra Linux – Vulnerability in nss, Thunderbird

Versions of NSS Network Security Services prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications that use NSS to handle signatures encoded within CMS, S/MIME, PKCS \7, or PKCS \12 are likely to be affected. Applications that...

[SECURITY] Fedora 45 Update: sssd-2.13.1-7.fc45

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

Rocky Linux 8.6 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / etc Multiple Vulnerabilities (ciqsa-2026_1161)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261161 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2024-6602, CVE-2024-6601, CVE-2024-6603, CVE-2024-6604...

Rocky Linux 8.6 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / etc Multiple Vulnerabilities (ciqsa-2026_1162)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261162 advisory. This advisory aggregates security fixes for the nss SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2024-6601, CVE-2024-6603, CVE-2024-6604. Tenable has...

Rocky Linux 8 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / nss-softokn / etc (crlsa-2023_1252)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231252 advisory. nss: Arbitrary memory write via PKCS 12 CVE-2023-0767 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessu...

AlmaLinux 9.2 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.2:CLSA-2026:1788162583)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1788162583 advisory. - A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaini...

Rocky Linux 8 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / nss-softokn / etc (crlsa-2024_0786)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240786 advisory. nss: vulnerable to Minerva side-channel information leak CVE-2023-6135 Tenable has extracted the preceding description block directly from the CIQ security advisory...

AlmaLinux 9.6 [TuxCare] Security Update: cifs-utils / cifs-utils-devel / cifs-utils-info / pam_cifscreds (ALMALINUX9.6:CLSA-2026:1784560784)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784560784 advisory. - A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user...

Rocky Linux 8 [CIQ] Security Update: nspr / nspr-debuginfo / nspr-debugsource / nspr-devel Multiple Vulnerabilities (crlsa-2020_3280)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20203280 advisory. nss: UAF in sftkFreeSession due to improper refcounting CVE-2019-11756 nss: Check length of inputs for cryptographic primitives CVE-2019-17006 nss: Side...

Rocky Linux 9.6 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.6:CLSA-2026:1787733592)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787733592 advisory. - A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the...