Ubuntu alert USN-8496-2 (cifs-utils)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8496-2] cifs-utils regression
Date:
             
 
Fri, 03 Jul 2026 19:56:35 +0000
Message-ID:
             
 
<E1wfk03-0007z4-5L@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8496-2
July 03, 2026

cifs-utils regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

USN-8496-1 introduced a regression in cifs-utils

Software Description:
- cifs-utils: Common Internet File System utilities

Details:

USN-8496-1 fixed a vulnerability in cifs-utils. Unfortunately, the fix
introduced a regression with Kerberos mounts. This update reverts the
security update until a complete fix is available.

We apologize for the inconvenience.

Original advisory details:

 It was discovered that cifs-utils incorrectly dropped root privileges
 before looking up user information. A local attacker could possibly use
 this issue to execute arbitrary code as the root user.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  cifs-utils                      2:7.4-1ubuntu0.26.04.2

Ubuntu 25.10
  cifs-utils                      2:7.4-1ubuntu0.25.10.2

Ubuntu 24.04 LTS
  cifs-utils                      2:7.0-2ubuntu0.4

Ubuntu 22.04 LTS
  cifs-utils                      2:6.14-1ubuntu0.5

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8496-2
  https://ubuntu.com/security/notices/USN-8496-1
  https://launchpad.net/bugs/2159053

Package Information:
  https://launchpad.net/ubuntu/+source/cifs-utils/2:7.4-1ub...
  https://launchpad.net/ubuntu/+source/cifs-utils/2:7.4-1ub...
  https://launchpad.net/ubuntu/+source/cifs-utils/2:7.0-2ub...
  https://launchpad.net/ubuntu/+source/cifs-utils/2:6.14-1u...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=4is6
-----END PGP SIGNATURE-----