A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between… (CVE-2026-104045)

CVE-2026-104045 describes a flaw in SSSD where a race condition in the autofs responder between asynchronous enumeration completion and map invalidation can be exploited by a local user. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause memory leaks that lead to excessive memory consumption, resulting in disruption or crash of the autofs service. This vulnerability affects numerous explicitly listed versions of SSSD.

The vulnerability allows a local attacker to cause a Denial of Service by exhausting memory resources of the autofs service, potentially leading to service disruption or crash. There is no impact on confidentiality or integrity reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, limiting local user access or monitoring for unusual autofs service behavior may help mitigate risk.