Race Condition Vulnerability in SSSD Affects Autofs Service by Red Hat
CVE-2026-104045

4.7MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8
Vendor: CVE Published:; 6 October 2026

What is CVE-2026-104045?

A flaw has been identified in SSSD that allows a local user to exploit a race condition affecting the autofs responder. This vulnerability enables the user to send concurrent requests for map enumeration and invalidation, leading to memory leaks. As a result, excessive memory consumption can occur, potentially causing the autofs service to become unresponsive or crash entirely.

References

https://access.redhat.com/security/cve/CVE-2026-104045

vdb-entryx_refsource_REDHAT

https://bugzilla.redhat.com/show_bug.cgi?id=2478663

issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:

4.7

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 6, 2026
Vulnerability Reserved
Oct 1, 2026

Credit

This issue was discovered by Found by AISLE in partnership with Red Hat.

CVE-2026-104045 Data

JSON