{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2026-104032", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2026-10-01T17:20:46.954Z", "datePublished": "2026-10-06T00:12:12.027Z", "dateUpdated": "2026-10-16T10:57:28.262Z" }, "containers": { "cna": { "title": "Sssd: sssd: denial of service via unprivileged autofs cache invalidation", "metrics": [ { "other": { "content": { "value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/" }, "type": "Red Hat severity rating" } }, { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "format": "CVSS" } ], "descriptions": [ { "lang": "en", "value": "A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of Service (DoS) from degraded automount availability and elevated resource consumption." } ], "affected": [ { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 10", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "sssd", "defaultStatus": "affected", "cpes": [ "cpe:/o:redhat:enterprise_linux:10" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "sssd", "defaultStatus": "unknown", "cpes": [ "cpe:/o:redhat:enterprise_linux:6" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "sssd", "defaultStatus": "affected", "cpes": [ "cpe:/o:redhat:enterprise_linux:7" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "sssd", "defaultStatus": "affected", "cpes": [ "cpe:/o:redhat:enterprise_linux:8" ] }, { "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "sssd", "defaultStatus": "affected", "cpes": [ "cpe:/o:redhat:enterprise_linux:9" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openshift/ose-rhel-coreos-8", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:openshift:4" ] }, { "vendor": "Red Hat", "product": "Red Hat OpenShift Container Platform 4", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "openshift/ose-rhel-coreos-9", "defaultStatus": "affected", "cpes": [ "cpe:/a:redhat:openshift:4" ] } ], "references": [ { "url": "https://access.redhat.com/security/cve/CVE-2026-104032", "tags": [ "vdb-entry", "x_refsource_REDHAT" ] }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479381", "name": "RHBZ#2479381", "tags": [ "issue-tracking", "x_refsource_REDHAT" ] } ], "datePublic": "2026-10-05T23:24:48.346Z", "problemTypes": [ { "descriptions": [ { "cweId": "CWE-408", "description": "Incorrect Behavior Order: Early Amplification", "lang": "en", "type": "CWE" } ] } ], "x_redhatCweChain": "CWE-408: Incorrect Behavior Order: Early Amplification", "workarounds": [ { "lang": "en", "value": "If SSSD automount integration is not required, disable the SSSD autofs responder so that unprivileged local users cannot issue autofs requests against it:\n\n systemctl --now mask sssd-autofs.socket sssd-autofs.service\n\nIf the autofs responder is enabled through the `services` line in the `[sssd]` section of /etc/sssd/sssd.conf, remove `autofs` from that line and restart SSSD with `systemctl restart sssd`.\n\nCaveats: disabling the autofs responder means SSSD will no longer serve automount maps to the automount daemon, and restarting SSSD briefly interrupts active identity lookups and automount operations. Where disabling the responder is not possible, restricting access to the autofs responder socket (for example via socket permissions or limiting which local UIDs may connect) so that only the intended trusted clients can reach it also reduces exposure before a fix is available." } ], "timeline": [ { "lang": "en", "time": "2026-05-18T03:32:25.000Z", "value": "Reported to Red Hat." }, { "lang": "en", "time": "2026-10-05T23:24:48.346Z", "value": "Made public." } ], "credits": [ { "lang": "en", "value": "This issue was discovered by Found by AISLE in partnership with Red Hat." } ], "providerMetadata": { "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-10-16T10:57:28.262Z" }, "x_generator": { "engine": "cvelib 1.8.0" } }, "adp": [ { "metrics": [ { "other": { "type": "ssvc", "content": { "timestamp": "2026-10-06T13:32:38.442451Z", "id": "CVE-2026-104032", "options": [ { "Exploitation": "poc" }, { "Automatable": "no" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "version": "2.0.3" } } } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T13:34:10.703Z" } } ] } }