https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:45:06 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:39575 <p><strong>Affected:</strong> AlmaLinux:8: cifs-utils, AlmaLinux:8: cifs-utils-devel, AlmaLinux:8: pam_cifscreds</p> <p>The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.</p> <p>Security Fix(es):</p> <p>* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)</p> <p>Bug Fix(es) and Enhancement(s):</p> <p>* add sssd method for mapping SID to UID/GID in man page of mount.cifs [almalinux-8.10.z] (JIRA:AlmaLinux-41059) * Update the mount.cifs man page to match the 3*echo_interval reconnection timeout (JIRA:AlmaLinux-80397) * cifs-utils: regression with kerberos mount [almalinux-8.10.z] (JIRA:AlmaLinux-192933)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: cifs-utils, AlmaLinux:8: cifs-utils-devel, AlmaLinux:8: pam_cifscreds</p> <p>The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.</p> <p>Security Fix(es):</p> <p>* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)</p> <p>Bug Fix(es) and Enhancement(s):</p> <p>* add sssd method for mapping SID to UID/GID in man page of mount.cifs [almalinux-8.10.z] (JIRA:AlmaLinux-41059) * Update the mount.cifs man page to match the 3*echo_interval reconnection timeout (JIRA:AlmaLinux-80397) * cifs-utils: regression with kerberos mount [almalinux-8.10.z] (JIRA:AlmaLinux-192933)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:39575 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0955 certfr-2026-avi-0955 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0955 https://cve.radiocsirt.org/vuln/euvd-2026-362253 EUVD-2026-362253 https://cve.radiocsirt.org/vuln/euvd-2026-362253 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12505 <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&#39;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.</p> <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&#39;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12505 https://cve.radiocsirt.org/vuln/ghsa-58j9-p7xf-pjx7 <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&#39;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.</p> <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&#39;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.</p> https://cve.radiocsirt.org/vuln/ghsa-58j9-p7xf-pjx7 https://cve.radiocsirt.org/vuln/msrc_cve-2026-12505 msrc_CVE-2026-12505 https://cve.radiocsirt.org/vuln/msrc_cve-2026-12505 https://cve.radiocsirt.org/vuln/oesa-2026-3028 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: cifs-utils</p> <p>The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fix(es):</p> <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&amp;apos;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.(CVE-2026-12505)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: cifs-utils</p> <p>The in-kernel CIFS filesystem is generally the preferred method for mounting SMB/CIFS shares on Linux. Security Fix(es):</p> <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&amp;apos;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.(CVE-2026-12505)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3028 https://cve.radiocsirt.org/vuln/rhsa-2026:32990 <p>cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall</p> <p>cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall</p> https://cve.radiocsirt.org/vuln/rhsa-2026:32990 https://cve.radiocsirt.org/vuln/rhsa-2026:44232 <p>cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall kernel: ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() podman: Podman: Information disclosure via malicious container image environment variables</p> <p>cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall kernel: ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() podman: Podman: Information disclosure via malicious container image environment variables</p> https://cve.radiocsirt.org/vuln/rhsa-2026:44232 https://cve.radiocsirt.org/vuln/rlsa-2026:32990 <p><strong>Affected:</strong> Rocky Linux:10: cifs-utils</p> <p>The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.</p> <p>Security Fix(es):</p> <p>* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: cifs-utils</p> <p>The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.</p> <p>Security Fix(es):</p> <p>* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:32990 https://cve.radiocsirt.org/vuln/suse-su-2026:22888-1 <p>Security update for cifs-utils</p> <p>Security update for cifs-utils</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22888-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-12505 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cifs-utils, Ubuntu:Pro:16.04:LTS: cifs-utils, Ubuntu:18.04:LTS: cifs-utils, Ubuntu:20.04:LTS: cifs-utils, Ubuntu:22.04:LTS: cifs-utils, Ubuntu:24.04:LTS: cifs-utils, Ubuntu:25.10: cifs-utils, Ubuntu:26.04:LTS: cifs-utils</p> <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&#39;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: cifs-utils, Ubuntu:Pro:16.04:LTS: cifs-utils, Ubuntu:18.04:LTS: cifs-utils, Ubuntu:20.04:LTS: cifs-utils, Ubuntu:22.04:LTS: cifs-utils, Ubuntu:24.04:LTS: cifs-utils, Ubuntu:25.10: cifs-utils, Ubuntu:26.04:LTS: cifs-utils</p> <p>A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to trick the root-owned helper into entering a custom environment (namespace) containing a malicious NSS module. This forces the system to load the attacker&#39;s controlled NSS Module and configuration, allowing them to execute arbitrary commands as the root user, elevating their privileges and fully compromising the system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-12505 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2125 <p>Ein lokaler Angreifer kann eine Schwachstelle in den cifs-utils von Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in den cifs-utils von Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2125