cifs-utils 7.9 fixes a mount-option injection vulnerability in mount.cifs that can allow local privilege escalation in affected privileged mounting configurations.

Affected versions: cifs-utils-4.2 - cifs-utils-7.8

Users are recommended to upgrade to version cifs-utils 7.9, which fixes the issue. Distributors can alternatively backport the fixes.

Credit: Johnathan Benge (reporter) Paulo Alcantara (patch author)

cifs-utils 7.9 release: webpage: https://wiki.samba.org/index.php/LinuxCIFSutils tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/ git: git://git.samba.org/cifs-utils.git gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary