CVE-2022-27239

Name of the Vulnerable Software and Affected Versions cifs-utils versions through 6.14

Description The issue is related to a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument, which could allow local attackers to gain root privileges. This is a result of a buffer overflow in memory.

Recommendations For versions through 6.14, consider restricting the use of the mount.cifs command with the ip= argument until a patch is available. As a temporary workaround, avoid using the ip= command-line argument in mount.cifs to minimize the risk of exploitation.