https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:32:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10951 bdu:2025-10951 https://cve.radiocsirt.org/vuln/bdu:2025-10951 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0349 certfr-2025-avi-0349 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0349 https://cve.radiocsirt.org/vuln/euvd-2026-225079 EUVD-2026-225079 https://cve.radiocsirt.org/vuln/euvd-2026-225079 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2312 <p>A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host&#39;s Kerberos credentials cache.</p> <p>A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host&#39;s Kerberos credentials cache.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-2312 https://cve.radiocsirt.org/vuln/ghsa-c3c3-3xh6-r623 <p>A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host&#39;s Kerberos credentials cache.</p> <p>A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host&#39;s Kerberos credentials cache.</p> https://cve.radiocsirt.org/vuln/ghsa-c3c3-3xh6-r623 https://cve.radiocsirt.org/vuln/msrc_cve-2025-2312 msrc_CVE-2025-2312 https://cve.radiocsirt.org/vuln/msrc_cve-2025-2312 https://cve.radiocsirt.org/vuln/oesa-2026-3029 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: cifs-utils</p> <p>The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fix(es):</p> <p>A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host&amp;apos;s Kerberos credentials cache.(CVE-2025-2312)</p> <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&amp;apos;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.(CVE-2026-12505)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: cifs-utils</p> <p>The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fix(es):</p> <p>A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host&amp;apos;s Kerberos credentials cache.(CVE-2025-2312)</p> <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&amp;apos;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.(CVE-2026-12505)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3029 https://cve.radiocsirt.org/vuln/suse-su-2025:01614-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2025:01614-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2312 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cifs-utils, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: cifs-utils, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure and 204 more</p> <p>A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host&#39;s Kerberos credentials cache.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cifs-utils, Ubuntu:Pro:14.04:LTS: linux, Ubuntu:Pro:14.04:LTS: linux-aws, Ubuntu:Pro:14.04:LTS: linux-azure, Ubuntu:Pro:14.04:LTS: linux-lts-xenial, Ubuntu:Pro:16.04:LTS: cifs-utils, Ubuntu:Pro:16.04:LTS: linux, Ubuntu:Pro:16.04:LTS: linux-aws, Ubuntu:Pro:16.04:LTS: linux-aws-hwe, Ubuntu:Pro:16.04:LTS: linux-azure and 204 more</p> <p>A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host&#39;s Kerberos credentials cache.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-2312