Alerts This Week
Warning Icon 1 975
Alerts This Week
Warning Icon 1 975

Ubuntu 26.04 LTS sssd Important Denial of Service Vuln 2026-6245

ubuntu
Calendar Grey June 1, 2026
Dist Ubuntu Esm H88
A critical advisory for Ubuntu users regarding an important sssd issue leading to potential denial of service.
SSSD could be made to crash if it received specially crafted input.

Summary

SSSD could be made to crash if it received specially crafted input.

Software Description:

- sssd: System Security Services Daemon

Details:

It was discovered that SSSD did not properly handle raw bytes in the PAM

passkey responder. A local attacker could possibly use this issue to cause

the SSSD PAM responder to crash, resulting in a denial of service.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  sssd                            2.12.0-1ubuntu5.1

Ubuntu 25.10
  sssd                            2.10.1-2ubuntu5.2

Ubuntu 24.04 LTS
  sssd                            2.9.4-1.1ubuntu6.5

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8355-1

CVE-2026-6245

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8355-1

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here