Amazon Linux 2 : sssd, --advisory ALAS2-2026-3828 (ALAS-2026-3828)

The version of sssd installed on the remote host is prior to 1.16.5-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3828 advisory. A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free...

UBUNTU-CVE-2026-12610

A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of servi...