Orta CVSS 6.2
CVE-2026-104044: CVE-2026-104044: NULL işaretçi başvurusu
Açıklama (NVD)
A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM) request when passkey authentication is enabled. Due to a missing state validation check in passkey Kerberos handling, the PAM responder dereferences an uninitialized pointer and crashes. This failure disrupts authentication services on the host.
Özet bilgiler
- CVSS v3.1
- 6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,12 (yüzdelik 2)
- CWE
- CWE-476
- Yama
- Yok / bilinmiyor