Release cifs-utils-7.6-1.el10_2 ALSA-2026:32990

cifs-utils security update
Severity: Important
Description
The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a SMB/CIFS share onto a client and use it as if it were a standard Linux file system.

Security Fix(es):

* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected packages:
cifs-utils-7.6-1.el10_2.x86_64
pam_cifscreds-7.6-1.el10_2.x86_64
cifs-utils-7.6-1.el10_2.s390x
pam_cifscreds-7.6-1.el10_2.s390x
cifs-utils-7.6-1.el10_2.ppc64le
pam_cifscreds-7.6-1.el10_2.ppc64le
cifs-utils-7.6-1.el10_2.aarch64
pam_cifscreds-7.6-1.el10_2.aarch64
cifs-utils-devel-7.6-1.el10_2.x86_64
cifs-utils-devel-7.6-1.el10_2.ppc64le
cifs-utils-devel-7.6-1.el10_2.aarch64
cifs-utils-devel-7.6-1.el10_2.s390x
cifs-utils-7.6-1.el10_2.x86_64_v2
pam_cifscreds-7.6-1.el10_2.x86_64_v2
cifs-utils-devel-7.6-1.el10_2.x86_64_v2