← Database

CVE-2025-2312

MEDIUM CVSS: 5.9 Published: 2025-03-25 Modified: 2026-06-17

Description

A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache.

Affected Platforms

Unknown

Weakness Type

CWE-488

References