Is CVE-2026-104029 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-104029?

CVE-2026-104029 has a CVSS v3 severity of LOW (3.3).

Back

CVE-2026-104029

Description

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs responder process to crash, resulting in a denial of service (DoS).