A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This triggers global cache invalidation and forces repeated lookups to backend directory providers, leading to a Denial of Service (DoS) from degraded automount availability and elevated resource consumption.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2026-104032 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2479381 | Exploit Issue Tracking Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
28 Oct 2026, 14:20
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Redhat openshift Container Platform
Fedoraproject sssd Fedoraproject Redhat Redhat enterprise Linux |
|
| References | () https://access.redhat.com/security/cve/CVE-2026-104032 - Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2479381 - Exploit, Issue Tracking, Mitigation, Vendor Advisory | |
| CPE | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:fedoraproject:sssd:2.12.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* |
06 Oct 2026, 01:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-06 01:16
Updated : 2026-10-28 14:20
NVD link : CVE-2026-104032
Mitre link : CVE-2026-104032
CVE.ORG link : CVE-2026-104032
JSON object : View
Products Affected
redhat
- openshift_container_platform
- enterprise_linux
fedoraproject
- sssd
CWE
CWE-408
Incorrect Behavior Order: Early Amplification