{"schema":"threatline.record/2","record":{"id":"CVE-2026-104041","aliases":[],"summary":"Sssd: sssd: denial of service via unbounded negative cache growth","details":"A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because the negative cache does not limit the total number of stored entries and only removes expired records when an existing key is rechecked, the cache can grow without bound. This behavior can lead to memory exhaustion, resulting in a Denial of Service (DoS) as the responder becomes unresponsive or terminates.","categories":["Operating systems"],"product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104041","source_modified_at":"2026-10-16T10:57:48.588Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104041","source_modified_at":"2026-10-16T10:57:48.588Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat","versions":[],"defaultStatus":"unknown"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104041","source_modified_at":"2026-10-16T10:57:48.588Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat","versions":[],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104041","source_modified_at":"2026-10-16T10:57:48.588Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104041","source_modified_at":"2026-10-16T10:57:48.588Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104041","source_modified_at":"2026-10-16T10:57:48.588Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat","versions":[],"defaultStatus":"affected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-104041","source_modified_at":"2026-10-16T10:57:48.588Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat","versions":[],"defaultStatus":"affected"}],"fixed_versions":[],"cvss":5.5,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00095,"percentile":0.00613,"score_date":"2026-10-23"},"published_at":"2026-10-06T01:00:49.767Z","modified_at":"2026-10-16T10:57:48.588Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-104041","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-16T10:57:48.588Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-104041","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://access.redhat.com/security/cve/CVE-2026-104041","tags":["vdb-entry","x_refsource_REDHAT"]},{"source":"CVE List","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2478864","tags":["exploit"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-06T13:19:20.997446Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-16T10:57:48.588Z","content_hash":"075ebf5283a3b1f42a83ad26ff28883d1f223ebdf4e3e6ee158b5f0874ef5e26"}}