CVE-2026-80048

A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory exhaustion within the `sssd-kcm` responder, resulting in a Denial of Service (DoS) for affected deployments.

Score
CVSS 3.1 5.5 Medium
Status
Awaiting Analysis - secalert@redhat.com
Published
2026-10-06
Last modified
2026-10-07
Weaknesses
CWE-770

Affected products

References

 
 
© AVABIS GmbH privacypolicy about