CVE-2026-68743

Summary: CVE-2026-68743 affects SSSD. The PAM responder’s extract_authtok_v1() does not validate auth_token_length against the remaining buffer, allowing a local attacker to craft a protocol v1 request to the PAM responder socket that can trigger an out-of-bounds read and cause a process crash (d...