cbcvebase.
CVE-2025-2312
published 2025-03-25

CVE-2025-2312: A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong…

PriorityP425medium5.9CVSS 3.1
AVLACHPRNUINSCCHINAN
EPSS
0.15%
4.5th percentile
A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache.

Affected

14 ranges
VendorProductVersion rangeFixed in
cifs-utilscifs-utils< 7.27.2
debiancifs-utils< cifs-utils 2:7.2-1 (forky)cifs-utils 2:7.2-1 (forky)
linuxlinux_kernel>= 0 < 5.15.0-142.1525.15.0-142.152
linuxlinux_kernel>= 0 < 6.8.0-62.656.8.0-62.65
linuxlinux_kernel>= 0 < 5.4.0-218.2385.4.0-218.238
msrcazl3_cifs-utils_7.0-2_on_azure_linux_3.0
msrcazl3_cifs-utils_7.3-1_on_azure_linux_3.0
msrcazl3_grub2_2.06-24_on_azure_linux_3.0
msrccbl2_cifs-utils_6.14-3_on_cbl_mariner_2.0
msrccbl2_grub2_2.06-14_on_cbl_mariner_2.0
sambacifs-utils>= 0 < 2:7.2-12:7.2-1
sambacifs-utils>= 0 < 2:7.2-12:7.2-1
ubuntulinux-azure-fips
ubuntulinux-fips

CVSS provenance

nvdv3.15.9MEDIUMCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_msrc6.7MEDIUM
vendor_debian5.9MEDIUM
vendor_redhat5.9MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.