CVE-2026-80048 | CVSS: 5.5 | 严重级别: MEDIUM
A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory exhaustion within the `sssd-kcm` responder, resulting in a Denial of Service (DoS) for affected deployments.
参考链接:
• https://access.redhat.com/security/cve/CVE-2026-80048
• https://bugzilla.redhat.com/show_bug.cgi?id=2479377
• https://bugzilla.redhat.com/show_bug.cgi?id=2479377
📌 数据来源: NVD 官方
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。