What is CVE-2026-68744?

CVE-2026-68744 is a low-severity vulnerability in Red Hat Enterprise Linux 10, classified under Use of Uninitialized Resource. CVSS score: 3.3/10. Published 2026-08-04.

How severe is CVE-2026-68744?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Red Hat Enterprise Linux 10

CVE-2026-68744

A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be trans…

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Red Hat Openshift Container Platform 4

Weakness classification (CWE)

CWE-908 — Use of Uninitialized Resource

References

secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking)

Frequently asked questions

What is CVE-2026-68744?: CVE-2026-68744 is a low-severity vulnerability in Red Hat Enterprise Linux 10, classified under Use of Uninitialized Resource. CVSS score: 3.3/10. Published 2026-08-04.
How severe is CVE-2026-68744?: Low severity. CVSS v3 base score is 3.3 out of 10.