CVE-2026-12610
Medium · 6.4CVSS
6.4
EPSS
0.1%
Published
Jun 30, 2026
CISA due date
—
The record
A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-102010 A flaw was found in GCC. CWE-825
- CVE-2026-76891 Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CWE-825
- CVE-2026-76890 Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CWE-825
- CVE-2026-17523 A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged… CWE-825
- CVE-2026-54778 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-825
- CVE-2026-58592 Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its… CWE-825
- CVE-2026-57435 Nokogiri is an open source XML and HTML library for the Ruby programming language. CWE-825
- CVE-2026-42014 A flaw was found in GnuTLS. CWE-825