CVE-2023-3758: Fedoraproject Fedora

High severity, CVSS 7.1. EPSS: 1% chance of exploitation in the next 30 days.

A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting or denying access to resources inappropriately.

Affected products

  • Fedoraproject Fedora: version 38 only; version 39 only; version 40 only
  • Fedoraproject Sssd: before 2.9.5 (fixed in 2.9.5)
  • Red Hat Codeready Linux Builder: version 8.0 only
  • Red Hat Codeready Linux Builder Eus: version 8.6 only; version 8.8 only; version 9.0 only; version 9.2 only; version 9.4 only; version 9.6 only
  • Red Hat Codeready Linux Builder For ARM64: version 8.0_aarch64 only
  • Red Hat Codeready Linux Builder For ARM64 Eus: version 8.6_aarch64 only; version 8.8_aarch64 only; version 9.0_aarch64 only; version 9.2_aarch64 only; version 9.4_aarch64 only; version 9.6_aarch64 only
  • Red Hat Codeready Linux Builder For IBM Z Systems: version 8.0_s390x only
  • Red Hat Codeready Linux Builder For IBM Z Systems Eus: version 8.6_s390x only; version 8.8_s390x only; version 9.0_s390x only; version 9.2_s390x only; version 9.4_s390x only; version 9.6_s390x only
  • Red Hat Codeready Linux Builder For Power Little Endian: version 8.0_ppc64le only
  • Red Hat Codeready Linux Builder For Power Little Endian Eus: version 8.6_ppc64le only; version 8.8_ppc64le only; version 9.0_ppc64le only; version 9.2_ppc64le only; version 9.4_ppc64le only; version 9.6_ppc64le only
  • Red Hat Enterprise Linux: version 8.0 only
  • Red Hat Enterprise Linux Eus: version 8.6 only; version 8.8 only; version 9.0 only; version 9.2 only; version 9.4 only; version 9.6 only
  • Red Hat Enterprise Linux For Arm 64: version 8.0_aarch64 only
  • Red Hat Enterprise Linux For Arm 64 Eus: version 8.6_aarch64 only; version 8.8_aarch64 only; version 9.0_aarch64 only; version 9.2_aarch64 only; version 9.4_aarch64 only; version 9.6_aarch64 only
  • Red Hat Enterprise Linux For IBM Z Systems: version 8.0_s390x only
  • Red Hat Enterprise Linux For IBM Z Systems Eus: version 8.6_s390x only; version 8.8_s390x only; version 9.0_s390x only; version 9.2_s390x only; version 9.4_s390x only; version 9.6_s390x only
  • Red Hat Enterprise Linux For Power Little Endian: version 8.0_ppc64le only
  • Red Hat Enterprise Linux For Power Little Endian Eus: version 8.6_ppc64le only; version 8.8_ppc64le only; version 9.0_ppc64le only; version 9.2_ppc64le only; version 9.4_ppc64le only; version 9.6_ppc64le only
  • Red Hat Enterprise Linux Server Aus: version 8.6 only; version 9.2 only; version 9.4 only; version 9.6 only
  • Red Hat Enterprise Linux Server For Power Little Endian Update Services For SAP Solutions: version 8.6_ppc64le only; version 8.8_ppc64le only; version 9.0_ppc64le only; version 9.2_ppc64le only; version 9.4_ppc64le only; version 9.6_ppc64le only
  • Red Hat Enterprise Linux Server Tus: version 8.6 only; version 8.8 only
  • Red Hat Enterprise Linux Update Services For SAP Solutions: version 8.6 only; version 8.8 only; version 9.0 only; version 9.2 only; version 9.4 only; version 9.6 only
  • Red Hat Virtualization Host: version 4.0 only

Published 2024-04-18. Last modified 2026-06-17.