Red Hat Security Advisory

RHSA-2026:39575

cifs-utils security, bug fix, and enhancement update

Released 2026-07-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) cifs-utils-7.0-5.el8_10, pam_cifscreds-7.0-5.el8_10
Red Hat Enterprise Linux CRB (v. 8) cifs-utils-devel-7.0-5.el8_10

Fixes 1 record

TI-2026-10734 CVE-2026-12505 · GHSA-58j9-p7xf-pjx7

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall

LOW 35

A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2026-06-18 Partial fix · 7.6-1.el10_2, 7.0-5.el8_10 +2 CWE-250