cifs-utils credential-file flaw can escalate local privileges
A local attacker may inject arbitrary mount options into privileged mount.cifs calls. Ubuntu notice USN-8938-1 covers the issue.
2 stories, newest first · one card per story
A local attacker may inject arbitrary mount options into privileged mount.cifs calls. Ubuntu notice USN-8938-1 covers the issue.
cifs-utils 7.9 fixes CVE-2026-104715, a mount.cifs option-injection flaw enabling local privilege escalation.
Today 1.2K readers · 1.8K views · 1.4K reads · all time 160K views