{"id":"AZL-109782","summary":"CVE-2026-104715 affecting package cifs-utils 7.7-1","details":"A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.","modified":"2026-10-21T14:17:40.899775622Z","published":"2026-10-16T07:17:08Z","upstream":["CVE-2026-104715"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104715"}],"affected":[{"package":{"name":"cifs-utils","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/cifs-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"7.7-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109782.json"}}],"schema_version":"1.9.0"}