Sssd: use-after-free crash in sssd' 'sssd_pam' process
cve-program · CVE-2026-12610
PublishedA flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-12610 · CVE overview and exploitation status
cve-program · CVE-2026-12610
Related changes
Linked by CVE identifier- Sssd: use-after-free crash in sssd' 'sssd_pam' process · Affected-version evidence changed · 10 Nov 2026
- Sssd: use-after-free crash in sssd' 'sssd_pam' process · Affected-version evidence changed · 6 Nov 2026
- Sssd: use-after-free crash in sssd' 'sssd_pam' process · Affected-version evidence changed · 5 Nov 2026
- Sssd: use-after-free crash in sssd' 'sssd_pam' process · Affected-version evidence changed · 4 Nov 2026