Back Linuxsecurity

Oracle Linux 9 ELSA-2026-39576 cifs

Linuxsecurity •LinuxSecurity Advisories • July 17, 2026

[7.6-2] - resolves: RHEL-192982 - fix krb5 mount regression [7.6-1] - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego

cifs-utils-7.6-2.el9_8.x86_64.rpm cifs-utils-devel-7.6-2.el9_8.i686.rpm cifs-utils-devel-7.6-2.el9_8.x86_64.rpm pam_cifscreds-7.6-2.el9_8.x86_64.rpm

cifs-utils-7.6-2.el9_8.aarch64.rpm cifs-utils-devel-7.6-2.el9_8.aarch64.rpm pam_cifscreds-7.6-2.el9_8.aarch64.rpm

Related CVEs: CVE-2026-12505

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Bug Fix for CVE-2026-12505 in Oracle Linux 8 and 9 Oracle has released important bug fixes for CVE-2026-12505 affecting cifs-utils in both Oracle Linux 8 and 9. The vulnerability allows local privilege escalation (LPE) through cifs.spnego, impacting users of both distributions. The CVE was published on 2026-06-18, and the fixes were released on 2026-07-17. Users are advised to update their systems promptly to mitigate potential exploitation. The fixes address issues such as krb5 mount regression and compiler warnings. Both Oracle Linux 8 and 9 are affected, with specific updates provided for each version. The updates include version 7.0-5 for Oracle Linux 8 and version 7.6-2 for Oracle Linux 9, which resolve the identified vulnerabilities. 2 sources 71

Extracted Entities

Oracle Linux 9 ELSA-2026-39576 cifs

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Platforms (1)