Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2026-90995
Red Hat Red Hat Enterprise Linux 10 — Sssd: sssd: local denial of service due to null pointer dereference in pam responder
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0014 2.7 —
AFFECTED
Product Versions Fixed
Red Hat Enterprise Linux 10 unspecified —
Red Hat Enterprise Linux 6 unspecified —
Red Hat Enterprise Linux 7 unspecified —
Red Hat Enterprise Linux 8 unspecified —
Red Hat Enterprise Linux 9 unspecified —
Red Hat OpenShift Container Platform 4 unspecified —
Red Hat OpenShift Container Platform 4 unspecified —
TIMELINE
Sep 14 Reserved by redhat
Sep 14 Published (CNA: redhat)
Oct 14 EXPLOIT PUBLISHED — CVE-2026-90995 (Red Hat Enterprise Linux 10). Public exploit reference added.
Description
A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules) responder socket can send a specially crafted protocol request. If the `pam_app_services` configuration is enabled and the service item is omitted from the request, a NULL pointer dereference can occur. This vulnerability leads to a denial of service, causing the PAM responder to crash and disrupt authentication services.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| September 14, 2026 | Reserved | Reserved by redhat |
| September 14, 2026 | Published | Published (CNA: redhat) |
| October 14, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-90995 (Red Hat Enterprise Linux 10). Public exploit reference added. |
Affected
Affected products and packages — 7 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-90995 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
