CVE-2022-29869: Debian Linux

Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days.

cifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains = (equal sign) characters but is not a valid credentials file.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Samba Cifs-Utils: before 6.15 (fixed in 6.15)

Published 2022-04-28. Last modified 2026-06-17.