USN-8938-1: cifs-utils vulnerability
Published Oct 19, 2026
·Updated
It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacker could possibly use this issue to inject arbitrary mount options into a privileged mount, resulting in a privilege escalation.
Affected Software
9 affected componentsFixes available
ubuntu/cifs-utils
All of the following
ubuntu/cifs-utils<2:7.4-1ubuntu3.1
2:7.4-1ubuntu3.1
Ubuntu Ubuntu=26.10
All of the following
ubuntu/cifs-utils<2:7.4-1ubuntu0.26.04.4
2:7.4-1ubuntu0.26.04.4
Ubuntu Ubuntu=26.04
All of the following
ubuntu/cifs-utils<2:7.0-2ubuntu0.6
2:7.0-2ubuntu0.6
Ubuntu Ubuntu=24.04
All of the following
ubuntu/cifs-utils<2:6.14-1ubuntu0.7
2:6.14-1ubuntu0.7
Ubuntu Ubuntu=22.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/cifs-utilsto a version that resolves this vulnerability.Fixed in 2:7.4-1ubuntu3.1 - Upgrade
Upgrade
ubuntu/cifs-utilsto a version that resolves this vulnerability.Fixed in 2:7.4-1ubuntu0.26.04.4 - Upgrade
Upgrade
ubuntu/cifs-utilsto a version that resolves this vulnerability.Fixed in 2:7.0-2ubuntu0.6 - Upgrade
Upgrade
ubuntu/cifs-utilsto a version that resolves this vulnerability.Fixed in 2:6.14-1ubuntu0.7
Event History
Oct 19, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software