A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system… (CVE-2026-88252)

CVE-2026-88252 describes a flaw in sssd where a local attacker can exhaust the responder service's available file descriptors by opening and maintaining numerous concurrent connections to a responder socket while queuing additional connection attempts. This triggers an unthrottled retry loop that leads to high CPU utilization and stalls the service, causing a Denial of Service condition that disrupts legitimate identity and authentication processing.

The vulnerability causes a Denial of Service by stalling the sssd responder service, which prevents legitimate identity and authentication requests from being processed. There is no impact on confidentiality or integrity. The attack requires local access and high attack complexity due to the need to open many concurrent connections.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a fix is available, limit local user access and monitor for unusual local connection activity to the sssd responder service.