CVE-2026-90996
No fix known EPSS <1%CVSS 4.0
A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero-length body to the Network Security Services (NSS) responder. This could lead to a denial-of-service condition, causing the NSS responder to become unstable or terminate. This vulnerability affects the availability of the system responder.
Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sssd | no fix |
| Debian 13 | sssd | no fix |
| Ubuntu 22.04 LTS | sssd | no fix |
| Ubuntu 24.04 LTS | sssd | no fix |
| Ubuntu 26.04 LTS | sssd | no fix |
| Ubuntu 26.10 | sssd | no fix |
| Ubuntu Pro 16.04 LTS | sssd | no fix |
| Ubuntu Pro 18.04 LTS | sssd | no fix |
| Ubuntu Pro 20.04 LTS | sssd | no fix |