Is CVE-2026-104030 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-104030?

CVE-2026-104030 has a CVSS v3 severity of MEDIUM (5.5).

Back

CVE-2026-104030

Description

A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash and disrupting authentication services.