AZL-109782
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109782.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109782
- Upstream
- CVE-2026-104715
- Published
- 2026-10-16T07:17:08Z
- Modified
- 2026-10-21T14:17:40Z
- Summary
- CVE-2026-104715 affecting package cifs-utils 7.7-1
- Details
-
A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.
- References