Skip to content
OpenAdvisories
Medium USN-7536-1 1 CVE

cifs-utils vulnerability

Published May 27, 2025 · Updated Oct 30, 2026

Ecosystem: Ubuntu

Summary

It was discovered that cifs-utils incorrectly handled namespaces when
obtaining Kerberos credentials. An attacker could possibly use this issue
to obtain sensitive information.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS cifs-utils 2:6.9-1ubuntu0.3
Ubuntu · 22.04 LTS 22.04:LTS cifs-utils 2:6.14-1ubuntu0.2
Ubuntu · 24.04 LTS 24.04:LTS cifs-utils 2:7.0-2ubuntu0.1

Vulnerabilities 1

  • Medium 5.9
    CVE-2025-2312

    cifs.upcall makes an upcall to the wrong namespace in containerized environments

    A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the hos…

    cifs-utils cifs-utils linux-raspi2 linux-hwe Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-2312