CVE-2026-90995

Published: Sep 14, 2026Modified: Oct 14, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules) responder socket can send a specially crafted protocol request. If the `pam_app_services` configuration is enabled and the service item is omitted from the request, a NULL pointer dereference can occur. This vulnerability leads to a denial of service, causing the PAM responder to crash and disrupt authentication services.

Affected (6)

Products: Fedoraproject: Sssd · Redhat: Enterprise Linux, Openshift Container Platform

1 product

2 products

Openshift Container Platform

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Sssd	Version 2.12.0
Redhat Enterprise Linux	Version 10.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Openshift Container Platform	Version 4.0

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://access.redhat.com/security/cve/CVE-2026-90995

Source: secalert@redhat.com

MitigationVendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2479464

Source: secalert@redhat.com

ExploitIssue TrackingMitigationVendor Advisory

Timeline

No history available yet.