Local Denial of Service Vulnerability in SSSD PAM Responder by Red Hat
CVE-2026-90994

4MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
14 September 2026

What is CVE-2026-90994?

A vulnerability exists within the PAM (Pluggable Authentication Modules) responder's protocol v1 parser in SSSD. Local clients with access to the PAM responder's UNIX socket can exploit this issue by negotiating protocol v1 and sending malformed PAM request bodies. This can lead to an out-of-bounds read, potentially causing the PAM responder to crash or restart, resulting in a denial of service condition for users relying on the PAM services.

References

https://access.redhat.com/security/cve/CVE-2026-90994
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2479455
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Found by AISLE in partnership with Red Hat.
.