Description
Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a denial of service (mounting outage) via a SIGKILL signal during a time window when the /etc/mtab~ file exists.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samba | Samba | 3.6 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cifs-utils | 2:4.5-1 | — |
| Debian 14 | samba | 2:3.4.7~dfsg-2 | — |
| Debian 13 | cifs-utils | 2:4.5-1 | — |
| Debian 13 | samba | 2:3.4.7~dfsg-2 | — |
| Debian 12 | cifs-utils | 2:4.5-1 | — |
| Debian 12 | samba | 2:3.4.7~dfsg-2 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | cifs-utils | 4.8.1-2.el6_1.2 | RHSA-2011:1221 |
| RHEL 6 | samba +11 | 3.5.6-86.el6_1.4 | RHSA-2011:1221 |
| RHEL 5 | samba +5 | 3.0.33-3.29.el5_7.4 | RHSA-2011:1219 |
| RHEL 4 | samba +3 | 3.0.33-0.34.el4 | RHSA-2011:1219 |
Advisories 2
- RHSA-2011:1221 Red Hat Security Advisory: samba and cifs-utils security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2011:1219 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 28, 2026
References
- https://bugzilla.samba.org/show_bug.cgi?id=7179
- https://bugzilla.redhat.com/show_bug.cgi?id=742907
- https://www.openwall.com/lists/oss-security/2011/09/27/1
- https://www.openwall.com/lists/oss-security/2011/09/30/5
- https://git.samba.org/?p=cifs-utils.git%3Ba=commitdiff%3Bh=810f7e4e0f2dbcbee0294d9b371071cb08268200