diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index fea6e1d496..9e0a5e0350 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -105,7 +105,9 @@ sys-apps/azure-vm-utils
 
 # Keep versions on both arches in sync.
 =sys-apps/zram-generator-1.2.1 ~arm64
-=sys-auth/sssd-2.9.7 ~arm64
+
+# Needed to address CVE-2025-11561
+=sys-auth/sssd-2.9.8
 
 # Keep versions on both arches in sync.
 =sys-boot/mokutil-0.7.2 **