CVE-2025-2312
cifs.upcall makes an upcall to the wrong namespace in containerized environments
Résumé
cifs.upcall makes an upcall to the wrong namespace in containerized environments
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-2312 cifs-utils
- Ubuntu UBUNTU-CVE-2025-2312 cifs-utils
Références
- advisory github.com
- advisory nvd.nist.gov
- patch git.samba.org
- patch web.git.kernel.org