CVE catalog

CVE-2026-104715

cifs-utils vulnerability

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.27% · Oct 25, 2026

A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancifs-utilssid2:7.9-1fixed
Debiancifs-utilsforky2:7.9-1fixed
Debiancifs-utilstrixie2:7.4-1vulnerable
Debiancifs-utilstrixie-security2:7.4-1+deb13u2fixed
Debiancifs-utilsbookworm2:7.0-2vulnerable
Ubuntucifs-utilsnoble2:7.0-2ubuntu0.6fixed
Susecifs-utilslinux enterprise micro 5.36.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise micro 5.46.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise micro 5.56.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise module for basesystem 15 sp76.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise high performance computing 15 sp4-espos6.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise high performance computing 15 sp4-ltss6.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise high performance computing 15 sp5-espos6.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise high performance computing 15 sp5-ltss6.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise server 15 sp4-ltss6.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise server 15 sp5-ltss6.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise server 15 sp6-ltss6.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise server for sap applications 15 sp46.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise server for sap applications 15 sp56.15-150400.3.27.1fixed
Susecifs-utilslinux enterprise server for sap applications 15 sp66.15-150400.3.27.1fixed
Ubuntucifs-utils22.042:6.11-3.1vulnerable
Ubuntucifs-utils22.042:6.14-1vulnerable
Ubuntucifs-utils22.042:6.14-1build1vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.1vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.2vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.3vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.4vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.5vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.6vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.7fixed
Ubuntucifs-utils24.042:7.0-2vulnerable
Ubuntucifs-utils24.042:7.0-2build1vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.1vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.2vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.3vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.4vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.5vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.6fixed
Ubuntucifs-utils26.102:7.4-1build1vulnerable
Ubuntucifs-utils26.102:7.4-1ubuntu3vulnerable
Ubuntucifs-utils26.102:7.4-1ubuntu3.1fixed
Ubuntucifs-utils26.042:7.4-1vulnerable
Ubuntucifs-utils26.042:7.4-1build1vulnerable
Ubuntucifs-utils26.042:7.4-1ubuntu0.26.04.1vulnerable
Ubuntucifs-utils26.042:7.4-1ubuntu0.26.04.2vulnerable
Ubuntucifs-utils26.042:7.4-1ubuntu0.26.04.3vulnerable
Ubuntucifs-utils26.042:7.4-1ubuntu0.26.04.4fixed
Ubuntucifs-utilspro2:6.4-1ubuntu1vulnerable
Ubuntucifs-utilspro2:6.4-1ubuntu1.1vulnerable
Ubuntucifs-utilspro2:6.4-1ubuntu1.1+esm1vulnerable
Ubuntucifs-utils18.042:6.7-1vulnerable
Ubuntucifs-utils18.042:6.8-1vulnerable
Ubuntucifs-utils18.042:6.8-1ubuntu1vulnerable
Ubuntucifs-utils18.042:6.8-1ubuntu1.1vulnerable
Ubuntucifs-utils18.042:6.8-1ubuntu1.2vulnerable
Ubuntucifs-utils20.042:6.9-0ubuntu1vulnerable
Ubuntucifs-utils20.042:6.9-1vulnerable
Ubuntucifs-utils20.042:6.9-1ubuntu0.1vulnerable
Ubuntucifs-utils20.042:6.9-1ubuntu0.2vulnerable
Ubuntucifs-utils20.042:6.9-1ubuntu0.3vulnerable
Ubuntucifs-utils20.042:6.9-1ubuntu0.4vulnerable
Ubuntucifs-utils22.042:6.11-3.1vulnerable
Ubuntucifs-utils22.042:6.14-1vulnerable
Ubuntucifs-utils22.042:6.14-1build1vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.1vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.2vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.3vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.4vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.5vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.6vulnerable
Ubuntucifs-utils22.042:6.14-1ubuntu0.7fixed
Ubuntucifs-utils24.042:7.0-2vulnerable
Ubuntucifs-utils24.042:7.0-2build1vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.1vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.2vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.3vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.4vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.5vulnerable
Ubuntucifs-utils24.042:7.0-2ubuntu0.6fixed
Ubuntucifs-utils26.102:7.4-1build1vulnerable
Ubuntucifs-utils26.102:7.4-1ubuntu3vulnerable
Ubuntucifs-utils26.102:7.4-1ubuntu3.1fixed
Ubuntucifs-utils26.042:7.4-1vulnerable
Ubuntucifs-utils26.042:7.4-1build1vulnerable
Ubuntucifs-utils26.042:7.4-1ubuntu0.26.04.1vulnerable
Ubuntucifs-utils26.042:7.4-1ubuntu0.26.04.2vulnerable
Ubuntucifs-utils26.042:7.4-1ubuntu0.26.04.3vulnerable
Ubuntucifs-utils26.042:7.4-1ubuntu0.26.04.4fixed
Alpinecifs-utils3.217.1-r1fixed
Alpinecifs-utils3.227.3-r1fixed
Alpinecifs-utils3.237.4-r1fixed
Alpinecifs-utils3.247.5-r1fixed
Susecifs-utilslinux enterprise server 12 sp5-ltss6.9-13.32.2fixed
Susecifs-utilslinux enterprise server ltss extended security 12 sp56.9-13.32.2fixed
Susecifs-utilslinux micro 6.07.0-159998.1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancifs-utilssourcesid2:7.9-1not yet assignedNot reportedNot reported
Debiancifs-utilssourceforky2:7.9-1not yet assignedNot reportedNot reported
Debiancifs-utilssourcetrixie2:7.4-1+deb13u1not yet assignedNot reportedNot reported
Debiancifs-utilssourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntucifs-utilsdebnoble2:7.0-2ubuntu0.6Not reportedNot reportedNot reported
Susecifs-utilsrpmlinux enterprise micro 5.36.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise micro 5.46.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise micro 5.56.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise module for basesystem 15 sp76.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise high performance computing 15 sp4-espos6.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise high performance computing 15 sp4-ltss6.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise high performance computing 15 sp5-espos6.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise high performance computing 15 sp5-ltss6.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise server 15 sp4-ltss6.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise server 15 sp5-ltss6.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise server 15 sp6-ltss6.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise server for sap applications 15 sp46.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise server for sap applications 15 sp56.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Susecifs-utilsrpmlinux enterprise server for sap applications 15 sp66.15-150400.3.27.1Not reportedSUSE-SU-2026:4819-1Not reported
Ubuntucifs-utilsdeb22.042:6.14-1ubuntu0.7Not reportedUSN-8938-1Not reported
Ubuntucifs-utilsdeb24.042:7.0-2ubuntu0.6Not reportedUSN-8938-1Not reported
Ubuntucifs-utilsdeb26.102:7.4-1ubuntu3.1Not reportedUSN-8938-1Not reported
Ubuntucifs-utilsdeb26.042:7.4-1ubuntu0.26.04.4Not reportedUSN-8938-1Not reported
Ubuntucifs-utilsdeb22.042:6.14-1ubuntu0.7Not reportedUBUNTU-CVE-2026-104715Not reported
Ubuntucifs-utilsdeb24.042:7.0-2ubuntu0.6Not reportedUBUNTU-CVE-2026-104715Not reported
Ubuntucifs-utilsdeb26.102:7.4-1ubuntu3.1Not reportedUBUNTU-CVE-2026-104715Not reported
Ubuntucifs-utilsdeb26.042:7.4-1ubuntu0.26.04.4Not reportedUBUNTU-CVE-2026-104715Not reported
Alpinecifs-utilsapk3.217.1-r1Not reportedALPINE-CVE-2026-104715Not reported
Alpinecifs-utilsapk3.227.3-r1Not reportedALPINE-CVE-2026-104715Not reported
Alpinecifs-utilsapk3.237.4-r1Not reportedALPINE-CVE-2026-104715Not reported
Alpinecifs-utilsapk3.247.5-r1Not reportedALPINE-CVE-2026-104715Not reported
Susecifs-utilsrpmlinux enterprise server 12 sp5-ltss6.9-13.32.2Not reportedSUSE-SU-2026:4897-1Not reported
Susecifs-utilsrpmlinux enterprise server ltss extended security 12 sp56.9-13.32.2Not reportedSUSE-SU-2026:4897-1Not reported
Susecifs-utilsrpmlinux micro 6.07.0-159998.1.1Not reportedSUSE-SU-2026:24372-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [cifs-utils]Affected
    Details (2)

    • 2:7.0-2 · amd64 · bookworm

      Affected

      usn · cifs-utils · debian · bookworm; usn · cifs-utils · debian · 12

    • 2:7.0-2 · arm64 · bookworm

      Affected

      usn · cifs-utils · debian · bookworm; usn · cifs-utils · debian · 12

[Debian 13 (Trixie)]

  • [cifs-utils]Affected
    Details (4)

    • 2:7.4-1 · amd64 · trixie

      Affected · Fixed: 2:7.4-1+deb13u1

      usn · cifs-utils · debian · 13

    • 2:7.4-1 · arm64 · trixie

      Affected · Fixed: 2:7.4-1+deb13u1

      usn · cifs-utils · debian · 13

    • 2:7.4-1+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 2:7.4-1+deb13u1

      usn · cifs-utils · debian · 13

    • 2:7.4-1+deb13u2 · amd64 · trixie-security

      Fixed · Fixed: 2:7.4-1+deb13u1

      usn · cifs-utils · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]