Skip to content
OpenAdvisories
Unscored USN-7536-2 0 CVEs

cifs-utils regression

Published Jun 16, 2025 · Updated Feb 10, 2026

Summary

USN-7536-1 fixed vulnerabilities in cifs-utils. This update introduced a
regression in certain environments. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

It was discovered that cifs-utils incorrectly handled namespaces when
obtaining Kerberos credentials. An attacker could possibly use this issue
to obtain sensitive information.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS cifs-utils 2:6.9-1ubuntu0.4
Ubuntu · 22.04 LTS 22.04:LTS cifs-utils 2:6.14-1ubuntu0.3
Ubuntu · 24.04 LTS 24.04:LTS cifs-utils 2:7.0-2ubuntu0.2

References

  • report
    https://launchpad.net/bugs/2112614
  • report
    https://launchpad.net/bugs/2113906