Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 512
Alerts This Week
Warning Icon 1 512

Fedora 43 sssd Critical Use-After-Free and GPO Cache Issues 2026-9ab663dcd4

fedora
Calendar Grey July 24, 2026
Scroller Fedora
Critical fixes for Fedora 43 sssd address use-after-free crash and GPO cache traversal issues to enhance security.
An update for the System Security Services Daemon (sssd) in Fedora 43 addresses multiple CVEs, fixing a use-after-free crash, a Kerberos authentication bypass, and privilege escala...

Summary

Provides a set of daemons to manage access to remote directories and

authentication mechanisms. It provides an NSS and PAM interface toward

the system and a pluggable back end system to connect to multiple different

account sources. It is also the basis to provide client auditing and policy

services for projects like FreeIPA.

The sssd subpackage is a meta-package that contains the daemon as well as all

the existing back ends.

Update Information:

CVE fixes: CVE-2026-12610 CVE-2026-14474 CVE-2026-14476 - rhbz#2494777: CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process - rhbz#2497650: CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass - rhbz#2497651: CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation

Topics%20covered

Topics Covered

security advisory fedora critical access control gpo cache user processes

Change Log

* Wed Jul 8 2026 Sumit Bose - 2.12.0-3 - CVE fixes: CVE-2026-12610 CVE-2026-14474 CVE-2026-14476 - rhbz#2494777: CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process - rhbz#2497650: CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass - rhbz#2497651: CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation * Tue Apr 28 2026 Pavel Březina - 2.12.0-2 - spec: add default value for samba_package_version

References


[ 1 ] Bug #2494777 - CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssd_pam' process [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2494777 [ 2 ] Bug #2497650 - CVE-2026-14476 sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2497650 [ 3 ] Bug #2497651 - CVE-2026-14474 sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2497651

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9ab663dcd4' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: sssd
Product: Fedora 43
Version: 2.12.0
Release: 3.fc43
URL: https://github.com/SSSD/sssd/
Summary: System Security Services Daemon

Topics%20covered

Topics Covered

security advisory fedora critical access control gpo cache user processes

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.