Ubuntu alert USN-8496-3 (cifs-utils)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8496-3] cifs-utils vulnerability
Date:
             
 
Mon, 13 Jul 2026 14:00:39 +0000
Message-ID:
             
 
<E1wjHD5-00070d-Dp@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8496-3
July 13, 2026

cifs-utils vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

cifs-utils could be made to run programs as an administrator.

Software Description:
- cifs-utils: Common Internet File System utilities

Details:

USN-8496-1 fixed vulnerabilities in cifs-utils. The update caused a
regression and was backed out in USN-8496-2. This update reintroduces the
security fix, along with a fix for the regression.

Original advisory details:

 It was discovered that cifs-utils incorrectly dropped root privileges
 before looking up user information. A local attacker could possibly use
 this issue to execute arbitrary code as the root user.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  cifs-utils                      2:7.4-1ubuntu0.26.04.3

Ubuntu 24.04 LTS
  cifs-utils                      2:7.0-2ubuntu0.5

Ubuntu 22.04 LTS
  cifs-utils                      2:6.14-1ubuntu0.6

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8496-3
  https://ubuntu.com/security/notices/USN-8496-2
  https://ubuntu.com/security/notices/USN-8496-1
  CVE-2026-12505

Package Information:
  https://launchpad.net/ubuntu/+source/cifs-utils/2:7.4-1ub...
  https://launchpad.net/ubuntu/+source/cifs-utils/2:7.0-2ub...
  https://launchpad.net/ubuntu/+source/cifs-utils/2:6.14-1u...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=ld9x
-----END PGP SIGNATURE-----