Description
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 5 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | cifs-utils | 2:7.9-1 | — |
| Debian 13 | cifs-utils | 2:7.4-1+deb13u1 | — |
| Debian 12 | cifs-utils | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | cifs-utils | 2:7.4-1ubuntu3.1 | USN-8938-1 |
| Ubuntu 26.04 LTS | cifs-utils | 2:7.4-1ubuntu0.26.04.4 | USN-8938-1 |
| Ubuntu 24.04 LTS | cifs-utils | 2:7.0-2ubuntu0.6 | USN-8938-1 |
| Ubuntu 22.04 LTS | cifs-utils | 2:6.14-1ubuntu0.7 | USN-8938-1 |
| Ubuntu 20.04 LTS | cifs-utils | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | cifs-utils | No fix yet | — |
| Ubuntu Pro 16.04 LTS | cifs-utils | No fix yet | — |
| Ubuntu Pro 14.04 LTS | cifs-utils | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLES 15 SP6 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLES 15 SP5 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLES 15 SP4 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLES 12 SP5 | cifs-utils | 6.9-13.32.2 | SUSE-SU-2026:4897-1 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | cifs-utils | 7.4-160000.3.1 | SUSE-SU-2026:24462-1 |
| SLES for SAP 15 SP6 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLES for SAP 15 SP5 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLES for SAP 15 SP4 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLES 16.0 | cifs-utils | 7.4-160000.3.1 | SUSE-SU-2026:24462-1 |
| SLE Micro 6.2 | cifs-utils | 7.4-160000.3.1 | SUSE-SU-2026:24435-1 |
| SLE Micro 6.0 | cifs-utils | 7.0-159998.1.1 | SUSE-SU-2026:24372-1 |
| SLE Micro 5.5 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLE Micro 5.4 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLE Micro 5.3 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLE HPC 15 SP5 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
| SLE HPC 15 SP4 | cifs-utils | 6.15-150400.3.27.1 | SUSE-SU-2026:4819-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | cifs-utils | 7.4-160000.3.1 | openSUSE-SU-2026:22170-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | cifs-utils | 7.5-r1 | — |
| Alpine v3.23 | cifs-utils | 7.4-r1 | — |
| Alpine v3.22 | cifs-utils | 7.3-r1 | — |
| Alpine v3.21 | cifs-utils | 7.1-r1 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | cifs-utils +3 | 7.7-145.amzn2023.0.1 | ALAS2023-2026-3291 |
| Amazon Linux 2 | cifs-utils +1 | 6.2-10.amzn2.0.5 | ALAS2-2026-4032 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | cifs-utils | 7.9-1 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
M3aCulpa/CVE-2026-104715 ★ 0 · Oct 15, 2026
CVE-2026-104715: cifs-utils credentials-file option injection (local root)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 9
- SUSE-SU-2026:24462-1 Security update for cifs-utils SUSE / openSUSE Security Updates · Nov 4, 2026
- openSUSE-SU-2026:22170-1 Security update for cifs-utils SUSE / openSUSE Security Updates · Nov 1, 2026
- SUSE-SU-2026:24435-1 Security update for cifs-utils SUSE / openSUSE Security Updates · Oct 30, 2026
- SUSE-SU-2026:24372-1 Security update for cifs-utils SUSE / openSUSE Security Updates · Oct 27, 2026
- ALAS2023-2026-3291 Important: cifs-utils security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 26, 2026
- ALAS2-2026-4032 Important: cifs-utils security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 26, 2026
- SUSE-SU-2026:4897-1 Security update for cifs-utils SUSE / openSUSE Security Updates · Oct 24, 2026
- SUSE-SU-2026:4819-1 Security update for cifs-utils SUSE / openSUSE Security Updates · Oct 21, 2026
- USN-8938-1 cifs-utils vulnerability Ubuntu Security Notices (USN) · Oct 19, 2026
References
- https://access.redhat.com/security/cve/CVE-2026-104715 vdb-entry
- RHBZ#2545023 issue-tracking