USN-7536-2
cifs-utils regression
USN-7536-1 fixed vulnerabilities in cifs-utils. This update introduced a regression in certain environments. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that cifs-utils incorrectly handled namespaces when obtaining Kerberos credentials. An attacker could possibly use this issue to obtain sensitive information.
What each source reports
OSV No score
cifs-utils regression
USN-7536-1 fixed vulnerabilities in cifs-utils. This update introduced a regression in certain environments. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that cifs-utils incorrectly handled namespaces when obtaining Kerberos credentials. An attacker could possibly use this issue to obtain sensitive information.
- Record
USN-7536-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cifs-utilsUbuntu:20.04:LTS |
before 2:6.9-1ubuntu0.4, plus listed versions 2:6.9-0ubuntu12:6.9-12:6.9-1ubuntu0.12:6.9-1ubuntu0.22:6.9-1ubuntu0.3 |
2:6.9-1ubuntu0.4 |
cifs-utilsUbuntu:22.04:LTS |
before 2:6.14-1ubuntu0.3, plus listed versions 2:6.11-3.12:6.14-12:6.14-1build12:6.14-1ubuntu0.12:6.14-1ubuntu0.2 |
2:6.14-1ubuntu0.3 |
cifs-utilsUbuntu:24.04:LTS |
before 2:7.0-2ubuntu0.2, plus listed versions 2:7.0-22:7.0-2build12:7.0-2ubuntu0.1 |
2:7.0-2ubuntu0.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-7536-2 is a vulnerability with no CVSS score yet in cifs-utils, published June 16, 2025. No source lists public exploit code. Fixed in cifs-utils 2:6.9-1ubuntu0.4.