diff --git a/pkgs/os-specific/linux/sssd/default.nix b/pkgs/os-specific/linux/sssd/default.nix
index 1d1f61f7f612..e90a485c6e79 100644
--- a/pkgs/os-specific/linux/sssd/default.nix
+++ b/pkgs/os-specific/linux/sssd/default.nix
@@ -74,6 +74,9 @@ stdenv.mkDerivation (finalAttrs: {
   };
 
   patches = [
+    # Fix Kerberos Support version for PAC responder
+    ./fix-kerberos-version.patch
+
     (replaceVars ./fix-ldb-modules-path.patch {
       inherit ldb;
       out = null; # will be replaced in postPatch https://github.com/NixOS/nixpkgs/pull/446589#discussion_r2384899857
diff --git a/pkgs/os-specific/linux/sssd/fix-kerberos-version.patch b/pkgs/os-specific/linux/sssd/fix-kerberos-version.patch
new file mode 100644
index 000000000000..3634f96a0f4a
--- /dev/null
+++ b/pkgs/os-specific/linux/sssd/fix-kerberos-version.patch
@@ -0,0 +1,14 @@
+diff --git a/src/external/pac_responder.m4 b/src/external/pac_responder.m4
+index 9072718..3501b6b 100644
+--- a/src/external/pac_responder.m4
++++ b/src/external/pac_responder.m4
+@@ -23,7 +23,8 @@ then
+         Kerberos\ 5\ release\ 1.18* | \
+         Kerberos\ 5\ release\ 1.19* | \
+         Kerberos\ 5\ release\ 1.20* | \
+-        Kerberos\ 5\ release\ 1.21*)
++        Kerberos\ 5\ release\ 1.21* | \
++        Kerberos\ 5\ release\ 1.22*)
+             krb5_version_ok=yes
+             AC_MSG_RESULT([yes])
+             ;;