A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade cifs-utils-debugsourceUpgrade cifs-utils-infoUpgrade cifs-utils-develUpgrade cifs-utils-debuginfoUpgrade pam_cifscreds-debuginfoUpgrade cifs-utilsUpgrade pam_cifscreds | May 4, 2026 | Nov 11, 2024 |
| Debian | — | No solution existsUpgrade cifs-utils | May 15, 2025 | Mar 25, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2025 |
| Suse | — | Upgrade dtb-amdUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade cifs-utils-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-develUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-exynosUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade cifs-utilsUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade pam_cifscredsUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rt | Apr 29, 2025 | Mar 25, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1026-gkeUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-6.8.0-1029-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1147-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-6.11Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1027-ibmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.4.0-1150-gcp-fipsUpgrade linux-image-6.8.0-62-genericUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-5.15.0-142-lowlatencyUpgrade cifs-utilsUpgrade linux-image-5.4.0-1106-bluefieldUpgrade linux-image-5.4.0-218-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1145-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-5.4.0-1121-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-6.8.0-1029-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.8.0-1031-gcp-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1029-oemUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-62-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-6.8.0-1031-gcpUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-6.8.0-1030-aws-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-62-lowlatencyUpgrade linux-image-azure-fde-edgeUpgrade linux-image-awsUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-5.4.0-218-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1029-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1078-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1030-awsUpgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-5.4.0-1065-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1093-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1013-azureUpgrade linux-image-6.8.0-1027-oracle-64kUpgrade linux-image-5.4.0-1152-azureUpgrade linux-image-5.4.0-1130-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1086-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1027-oracleUpgrade linux-image-6.8.1-1023-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1029-raspiUpgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1147-aws-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1013-gkeopUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1013-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1029-nvidia-64kUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-5.15.0-1028-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-5.4.0-1153-azure-fipsUpgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fde-6.11Upgrade linux-image-azure-6.11Upgrade linux-image-5.4.0-218-genericUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-2024-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-5.4.0-1134-kvmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-5.4.0-1150-gcpUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-62-generic-64kUpgrade linux-image-5.15.0-142-generic-64k | Mar 19, 2025 | Mar 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Mar 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub