A LPE vulnerability in CIFSwitch has been disclosed in Linux CIFS/cifs-utils
Security researcher Asim Manizada has revealed a vulnerability in CIFSwitch — a local privilege escalation in the Linux kernel and the user-space cifs-utils package. The issue affects the handling path of the CIFS/SMB Kerberos/SPNEGO upcall, which is the mechanism through which the kernel's CIFS client requests data from the user-space helper for Kerberos authentication when mounting SMB resources. The description was published after the linux-distros embargo expired; the CVE identifier at the time of publication was still […]
