CVE-2026-68744

A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to disclose cached directory data and heap layout information from the sssd_nss process.

Score

CVSS 3.1 3.3 Low

Status

Analyzed - secalert@redhat.com

Published

2026-08-04

Last modified

2026-08-31

Weaknesses

CWE-908

Affected products

• Sssd (Fedoraproject)
• Enterprise Linux (Redhat)
• Openshift (Redhat)
• Openshift Container Platform (Redhat)

References

• https://access.redhat.com/security/cve/CVE-2026-68744
• https://bugzilla.redhat.com/show_bug.cgi?id=2509761