Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory pointer is incorrectly handled. A local attacker could exploit this flaw by manipulating smartcard or YubiKey contents, leading to a denial of service that disrupts authentication. This vulnerability also presents a potential for privilege escalation, although it is difficult to exploit.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 2 products
🚨 ATENÇÃO, admins #SUSE! CVE-2026-12610 no SSSD pode causar crash no PAM responder e abrir brecha para um escalonamento de privilégios. Saiba mais . -> http://tinyurl.com/3vte7226 https://t.co/bBwIpvuZHX
Post summary
The tweet announces CVE-2026-12610 in SSSD, warning that it can crash the PAM responder and enable privilege escalation, but provides no PoC, exploit details, or patch information.
CVE-2026-12610 Use-After-Free Vulnerability in SSSD YubiKey Authentication Leadi... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12610 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The text announces a Use‑After‑Free vulnerability in SSSD YubiKey authentication and provides a link to a Vulmon page for further details.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fedoraproject | sssd | - | - | - |
| OS | redhat | enterprise_linux | 10.0 | - | - |
| OS | redhat | enterprise_linux | 8.0 | - | - |
| OS | redhat | enterprise_linux | 9.0 | - | - |