Search: CVE-2026-104039

CVE-2026-104039 is a moderate severity vulnerability in SSSD on Red Hat Enterprise Linux 10 that allows a local user to cause a denial of service by crashing system authentication services. The flaw occurs when the PAM responder handling GSSAPI authentication frees cached connection state without clearing the reference pointer, leading to expired pointer dereference upon additional requests on the same connection. Exploitation requires local access, specific non-default configuration enabling PAM GSSAPI authentication, and an established session. The impact is limited to denial of service without compromising confidentiality or integrity. A workaround is available by disabling PAM GSSAPI authentication in the SSSD configuration.