CVE-2004-0186: Linux Kernel

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.

Affected products

• Linux Linux Kernel: version 2.6.0 only; version 2.6.1 only; version 2.6_test9_cvs only
• Samba Samba: version 2.0 only; version 3.0.0 only

Published 2004-03-15. Last modified 2026-06-16.