linux-announce AT lists.psi.ch

Subject: Linux Mailing List

List archive

[[Linux-announce] ] CIFSwitch: Kernel vulnerability for gaining root access

From: "Konrad Bucheli (PSI)" <konrad.bucheli AT psi.ch>
To: linux-announce AT lists.psi.ch
Subject: [[Linux-announce] ] CIFSwitch: Kernel vulnerability for gaining root access
Date: Thu, 11 Jun 2026 10:34:56 +0200
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=psi.ch; dmarc=pass action=none header.from=psi.ch; dkim=pass header.d=psi.ch; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=7VPqIYuUUYdx3AWha06LWDonlTaTG05K1bsa8q09NWw=; b=G74cBP00jetSSrQ10WrzkosnGJ01A4ngrPepPUPIq7t+E6aSsi7tIY/458m0ZPUqhv2nR/l9vPxoXSoPjmMgJnBf9WNuVUJQDsRf/YmMfP90HuaB9rB77ShRUArlgQXkNWo6QiM40O/7Myj8x2Ln2qgMtwJieYjK3WYE7KTXgANentdqQemX2lqJ5ly3XOcskgNA6df7p9/miRb7sg07h7HBGQ4Vk6NB1eEniJuH4GxaTv1DuWUIzp9yR4JHB703XVbR6HXieM5dRlQdn25YTqftoqWwrwnOSvywt6KRHWrhwp3JOGRj+s1q0NKd7Uta0oY1s9KCFzwmVMlwNYZlEg==
Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=YPiB8MDXGG7hDWRD7KzxEjczigzSlAJaMHaPa6PKmow66A6QCkSW8X+unL5rvpcw/zPXYTt8BMQvANDYguxOHI1A0moFLHH3+tmH6m0Nq1UasRfPL1nsZsE/Vltzd2j2DmqG/vln0dKC2XoGRSM8F6baUBKXkjtjuLsw0x2eX5HbTkyf132oiltMYxvimRpGVGiyuo9vY5jzGGUwx8X9450p3Nubuuj+fAsEtWrvl/buihsVxFHmqkfSRhzW8vsJDnuHLNkMTzyzonJf884y1tt/ZMStw2HCsyXCSUAmAn0YTtqu1svtwR4yXuVriyOBl2ct/YTKdtSTxbD6rJlSNg==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=psi.ch;

Hi

Also the CIFSwitch vulnerability allows for local privilege escalation:

https://heyitsas.im/posts/cifswitch/

There are now fixed kernels released by RedHat:

RHEL8: kernel-4.18.0-553.129.1.el8_10
RHEL9: kernel-5.14.0-687.13.1.el9_8

please update and reboot

Kind regards
Konrad

--
Paul Scherrer Institut
Konrad Bucheli
Linux Systems Engineer
Core Linux Research Services
Science IT Infrastructure and Services department (AWI)
OBBA/230
Forschungstrasse 111
5232 Villigen PSI
Switzerland

Phone: +41 56 310 27 24
konrad.bucheli AT psi.ch
www.psi.ch

[[Linux-announce] ] CIFSwitch: Kernel vulnerability for gaining root access, Konrad Bucheli (PSI), 06/11/2026