The LPE vulnerability CIFSwitch in Linux CIFS/cifs-utils has been disclosed.
Security researcher Asim Manizada has revealed the CIFSwitch vulnerability â a local privilege escalation issue in the Linux kernel and the user-space package cifs-utils. The problem involves the handling path of the CIFS/SMB Kerberos/SPNEGO upcall, which is the mechanism through which the kernel's CIFS client requests data for Kerberos authentication from the user-space helper when mounting SMB resources. The description was published after the linux-distros embargo; the CVE identifier at the time of publication is still […]
