Threats tagged 'ghsa-3fc8-28wq-wq67'

A vulnerability in the Linux kernel's SMB client component allowed userspace to create cifs.idmap keys with authority-bearing fields that were treated as kernel-originating inputs. This could lead to unvetted descriptions being consumed in root context. The issue was resolved by restricting acceptance of cifs.idmap descriptions to only when CIFS uses its private root credentials to request the key, mirroring a similar fix for cifs.spnego.