rpm package
almalinux/pam_cifscreds
pkg:rpm/almalinux/pam_cifscreds
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-12505 | Hig | 7.8 | < 7.0-5.el8_10 | 7.0-5.el8_10 | Jun 18, 2026 | A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to |
- affected < 7.0-5.el8_10fixed 7.0-5.el8_10
A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looking up user information inside a user-controlled environment. A local, low privileged attacker can exploit this by using a crafted request_key payload to