The vulnerability CVE-2026-12505 affects the cifs-utils package, which provides tools for mounting SMB/CIFS shares on Linux systems. Specifically, a local privilege escalation can occur due to a forged cifs.spnego key description processed by cifs.upcall. This allows a local attacker to gain elevated privileges on the affected system. Red Hat has issued an important security advisory (RHSA-2026:39576) with an update that fixes this issue. The advisory also addresses a regression with kerberos mounts. The vulnerability is categorized under CWE-250 (Execution with Unnecessary Privileges).

An attacker with local access to a system running vulnerable versions of cifs-utils can exploit this vulnerability to escalate their privileges, potentially gaining unauthorized administrative capabilities. This elevates the risk of further system compromise or unauthorized actions on the affected host.

Red Hat has released an official security update for cifs-utils that addresses this local privilege escalation vulnerability. Users should apply the update as detailed in the Red Hat advisory RHSA-2026:39576 and the referenced article https://access.redhat.com/articles/11258. The update is available for Red Hat Enterprise Linux 9 and related variants. Applying this update will remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.