CVE-2026-104029: Out-of-bounds Read in Red Hat Red Hat Enterprise Linux 10

This vulnerability in SSSD arises from improper buffer offset calculation during request parsing in the autofs responder UNIX socket. A local attacker can exploit this flaw by sending a crafted request, causing an out-of-bounds read of memory. The primary consequence is a denial of service due to the autofs responder process crashing. There is no indication of information disclosure or privilege escalation. The vulnerability affects Red Hat Enterprise Linux 10, but no specific affected versions or patch information is provided in the input data. The vendor advisory URL is available for further details.

The impact is limited to denial of service caused by the autofs responder process crashing. There is no impact on confidentiality or integrity. The attack requires local access and low complexity, with no user interaction needed.

Patch status is not yet confirmed — check the Red Hat vendor advisory at https://access.redhat.com/security/cve/CVE-2026-104029 for current remediation guidance. Until a patch is applied, restrict local access to trusted users to mitigate risk. No official fix or workaround is explicitly stated in the provided data.