CVE-2025-2312: Cifs-Utils

Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache.

Affected products

• Cifs-Utils Cifs-Utils: before 7.2 (fixed in 7.2)

Published 2025-03-25. Last modified 2026-06-17.