{"id":181809,"date":"2026-05-30T14:48:10","date_gmt":"2026-05-30T12:48:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnarodovana-lpe-uyazvimost-cifswitch-v-linux-cifs-cifs-utils"},"modified":"2026-05-30T14:48:10","modified_gmt":"2026-05-30T12:48:10","slug":"obnarodovana-lpe-uyazvimost-cifswitch-v-linux-cifs-cifs-utils","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/obnarodovana-lpe-uyazvimost-cifswitch-v-linux-cifs-cifs-utils","title":{"rendered":"The LPE vulnerability CIFSwitch in Linux CIFS\/cifs-utils has been disclosed.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>K\u00ebrkuesi i siguris\u00eb <strong>Asim Manizada<\/strong> zbuloi nj\u00eb t\u00eb dob\u00ebt\u00ebsi <strong>CIFSwitch<\/strong> \u2014 rritje lokale e privilegjeve n\u00eb lidhje me b\u00ebrtham\u00ebn Linux dhe paket\u00ebn e p\u00ebrdoruesit <strong>cifs-utils<\/strong>. Problemi ndikon n\u00eb rrug\u00ebn e p\u00ebrpunimit <strong>CIFS\/SMB Kerberos\/SPNEGO upcall<\/strong>, q\u00eb do t\u00eb thot\u00eb mekanizmi me t\u00eb cilin klienti CIFS i b\u00ebrtham\u00ebs k\u00ebrkon nga ndihmuesi i p\u00ebrdoruesit t\u00eb dh\u00ebnat p\u00ebr autentifikimin Kerberos gjat\u00eb montimit t\u00eb burimeve SMB. P\u00ebrshkrimi \u00ebsht\u00eb publikuar pas p\u00ebrfundimit t\u00eb embargos linux-distros; identifikuesi CVE n\u00eb momentin e publikimit nuk ishte akoma caktuar.<\/p>\n<p><noindex><noindex><\/p>\n<p><a rel=\"nofollow\" href=\"https:\/\/almalinux.org\/blog\/2026-05-28-cifswitch\/\">Thelbi i t\u00eb dob\u00ebsis\u00eb \u00ebsht\u00eb<\/a>, q\u00eb nj\u00eb p\u00ebrdorues i pa privilegjuar mund t\u00eb th\u00ebrras\u00eb request_key(&quot;cifs.spnego&quot;, &#8230;) dhe t\u00eb transferoj\u00eb nj\u00eb p\u00ebrshkrim t\u00eb falsifikuar t\u00eb \u00e7el\u00ebsit. N\u00eb nj\u00eb skenar normal, nj\u00eb varg t\u00eb till\u00eb duhet ta formonte vet\u00eb klienti CIFS i b\u00ebrtham\u00ebs: ai p\u00ebrmban informacione rreth serverit, UID, credential UID, PID, q\u00ebllimin e upcall dhe parametrat e tjer\u00eb. Megjithat\u00eb, b\u00ebrthama nuk e verifikoi n\u00ebse p\u00ebrshkrimi v\u00ebrtet kishte ardhur nga n\u00ebn-sistemi CIFS, dhe cifs.upcall, i ekzekutuar nga root p\u00ebrmes nj\u00eb rregulli standard request-key, i besoi k\u00ebtyre fushave si t\u00eb dh\u00ebna t\u00eb krijuara nga b\u00ebrthama.<\/p>\n<p><\/noindex><\/noindex><\/p>\n<p><noindex><\/p>\n<p><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/oss-security\/2026\/05\/28\/2\">T\u00eb dob\u00ebsia nuk \u00ebsht\u00eb universale<\/a> \"nj\u00eb vrim\u00eb n\u00eb \u00e7do Linux nga kutia\". P\u00ebr ta shfryt\u00ebzuar k\u00ebt\u00eb, duhet t\u00eb p\u00ebrputhen disa kushte: nj\u00eb b\u00ebrtham\u00eb t\u00eb dob\u00ebt, cifs-utils t\u00eb instaluar me rregullin cifs.spnego, mund\u00ebsia p\u00ebr p\u00ebrdoruesit pa privilegje p\u00ebr t\u00eb krijuar hap\u00ebsira namespaces p\u00ebrdoruesi\/mount, dhe gjithashtu mungesa e bllokimeve nga SELinux, AppArmor ose nj\u00eb politike tjet\u00ebr LSM. N\u00eb nj\u00eb mesazh n\u00eb oss-security \u00ebsht\u00eb p\u00ebrmendur ve\u00e7mas se n\u00eb sistemet e prekura, kjo ofron nj\u00eb rrug\u00eb nga nj\u00eb p\u00ebrdorues lokal pa privilegje p\u00ebr t\u00eb ekzekutuar kod nga root.<\/p>\n<p><\/noindex><br \/>\n<noindex><\/p>\n<p>Teknikisht <a rel=\"nofollow\" href=\"https:\/\/blog.cloudlinux.com\/cifswitch-mitigation-and-kernel-update\">zinxhirja nd\u00ebrtohet p\u00ebrreth asaj<\/a>, q\u00eb cifs.upcall mund t\u00eb kaloj\u00eb n\u00eb hap\u00ebsirat e emrit t\u00eb specifikuara n\u00eb p\u00ebrshkrimin e rrem\u00eb, dhe t\u00eb ekzekutoj\u00eb nj\u00eb k\u00ebrkes\u00eb NSS deri n\u00eb shkeqjen p\u00ebrfundimtare t\u00eb privilegjeve. Si rezultat, nj\u00eb ambient i kontrolluar nga sulmuesi mund t\u00eb ndikoj\u00eb n\u00eb ngarkimin e modulit NSS nga procesi root. N\u00eb p\u00ebrshkrimet publike theksohet se kjo \u00ebsht\u00eb nj\u00eb gabim logjik n\u00eb kufirin e b\u00ebrtham\u00ebs dhe hap\u00ebsir\u00ebs s\u00eb p\u00ebrdoruesit, e jo nj\u00eb t\u00eb dob\u00ebsi klasike t\u00eb korruptimit t\u00eb memories.<\/p>\n<p><\/noindex><\/p>\n<p>Rregullimi n\u00eb b\u00ebrtham\u00eb rezultoi t\u00eb ishte i vog\u00ebl n\u00eb p\u00ebrmas\u00eb: p\u00ebr llojin e \u00e7el\u00ebsave cifs.spnego u shtua nj\u00eb kontroll q\u00eb refuzon p\u00ebrshkrimet e krijuara jo nga vet\u00eb klienti CIFS me kredentet e tij private spnego_. Ky qasje mbyll klas\u00ebn e sulmeve pa nevoj\u00ebn p\u00ebr ndryshime sinchronike n\u00eb cifs-utils, megjithat\u00eb autori thekson se nj\u00eb forcim shtes\u00eb i hap\u00ebsir\u00ebs s\u00eb p\u00ebrdoruesit \u00ebsht\u00eb gjithsesi i d\u00ebshiruesh\u00ebm.<\/p>\n<p><noindex><\/p>\n<p><a rel=\"nofollow\" href=\"https:\/\/almalinux.org\/blog\/2026-05-28-cifswitch\/\">AlmaLinux deklaroi<\/a>, q\u00eb logjika themelore \u00ebsht\u00eb e pranishme n\u00eb t\u00eb gjitha versionet e mb\u00ebshtetura t\u00eb AlmaLinux, dhe AlmaLinux 8, 9, 10 dhe Kitten 10 konsiderohen t\u00eb prekuara n\u00ebse cifs-utils \u00ebsht\u00eb i instaluar. Bllokadat e kernelit jan\u00eb p\u00ebrgatitur n\u00eb depo testing: p\u00ebr AlmaLinux 9 \u00ebsht\u00eb p\u00ebrcaktuar paketa kernel-5.14.0-687.5.4.el9_8 ose m\u00eb e re, p\u00ebr AlmaLinux 10 \u2014 kernel-6.12.0-211.7.4.el10_2 ose m\u00eb e re.<\/p>\n<p><\/noindex><\/p>\n<p>Si masa t\u00eb p\u00ebrkohshme deri n\u00eb instalimin e kernelit t\u00eb korrigjuar, propozohet t\u00eb hiqet cifs-utils, n\u00ebse klienti SMB\/CIFS nuk po p\u00ebrdoret n\u00eb sistem, t\u00eb ndalohet ngarkimi i modulit cifs, t\u00eb tejkalohet rregulli cifs.spnego n\u00eb request-key ose t\u00eb \u00e7aktivizohet namespaces e p\u00ebrdoruesve pa privilegje. K\u00ebto masa p\u00ebr shkurtim mund t\u00eb thyejn\u00eb autentikimin Kerberos p\u00ebr montimet CIFS, prandaj n\u00eb serverat ku p\u00ebrdoren realisht SMB share t\u00eb autentikuar me Kerberos, ato duhet t\u00eb aplikohen me kujdes.<\/p>\n<p>CIFSwitch \u00ebsht\u00eb gjithashtu shum\u00eb interesant p\u00ebr kontekstin e zbulimit: autori e p\u00ebrshkruan at\u00eb si nj\u00eb rezultat t\u00eb k\u00ebrkimit p\u00ebr zinxhir\u00eb t\u00eb shumt\u00eb duke p\u00ebrdorur LLM dhe p\u00ebrfaq\u00ebsimin grafik t\u00eb lidhjeve midis objekteve t\u00eb siguris\u00eb. Por p\u00ebrfundimi praktik p\u00ebr administrator\u00ebt \u00ebsht\u00eb mjaft i thjesht\u00eb: kontrolloni prania e cifs-utils, gjendjen e namespaces t\u00eb p\u00ebrdoruesve dhe p\u00ebrdit\u00ebsimet e kernelit, ve\u00e7an\u00ebrisht n\u00eb sistemet ku ka p\u00ebrdorues lokal\u00eb ose skenar\u00eb kontejner\u00ebsh me mund\u00ebsi t\u00eb avancuara namespace.<\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18305995\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Asim Manizada \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CIFSwitch \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 cifs-utils. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 CIFS\/SMB Kerberos\/SPNEGO upcall, \u0442\u043e \u0435\u0441\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 CIFS-\u043a\u043b\u0438\u0435\u043d\u0442 \u044f\u0434\u0440\u0430 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e helper\u2019\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f Kerberos-\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 SMB-\u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e \u043f\u043e\u0441\u043b\u0435 \u0438\u0441\u0442\u0435\u0447\u0435\u043d\u0438\u044f \u044d\u043c\u0431\u0430\u0440\u0433\u043e linux-distros; \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0435\u0449\u0451 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181809","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Asim Manizada \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CIFSwitch \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 cifs-utils.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/obnarodovana-lpe-uyazvimost-cifswitch-v-linux-cifs-cifs-utils\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u0430 LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CIFSwitch \u0432 Linux CIFS\/cifs-utils | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Asim Manizada \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CIFSwitch \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 cifs-utils.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/obnarodovana-lpe-uyazvimost-cifswitch-v-linux-cifs-cifs-utils\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-30T12:48:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-30T12:48:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cbsht\u00eb zbuluar nj\u00eb vulnerabilitet LPE n\u00eb CIFSwitch n\u00eb Linux CIFS\/cifs-utils | ProHoster","description":"K\u00ebrkuesi i siguris\u00eb Asim Manizada ka zbuluar nj\u00eb vulnerabilitet n\u00eb CIFSwitch \u2014 nj\u00eb rritje lokale privilegjesh n\u00eb lidhje me bllokad\u00ebn e kernelit Linux dhe paket\u00ebn e p\u00ebrdoruesit cifs-utils.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/obnarodovana-lpe-uyazvimost-cifswitch-v-linux-cifs-cifs-utils","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u0430 LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CIFSwitch \u0432 Linux CIFS\/cifs-utils | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Asim Manizada \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CIFSwitch \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 cifs-utils.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/obnarodovana-lpe-uyazvimost-cifswitch-v-linux-cifs-cifs-utils","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-30T12:48:10+00:00","article:modified_time":"2026-05-30T12:48:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/181809","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=181809"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/181809\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=181809"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=181809"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=181809"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}