Search/CVE-2022-27239
● CVE — High

CVE-2022-27239

Vendordebian, suse, fedoraproject, hp, sambaProductdebian linux, linux enterprise desktop, linux enterprise server, linux enterprise software development kit, fedora, caas platform, openstack cloud, helion openstack, openstack cloud crowbar, linux enterprise high performance computing, cifs-utils, enterprise storage, linux enterprise micro, linux enterprise point of service, linux enterprise real time, linux enterprise storage, manager proxy, manager retail branch server, manager serverDiscoveredApr 27, 2022UpdatedNov 21, 2024

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

CVSS v3.1
7.8 HIGH
EPSS
0.58%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
1
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 27, 2026
▲ 0.01pp
0.56% → 0.58% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
disclosure → media coverage
Apr 27, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024
Aug 7, 2025
ubuntu.com reports: USN-7688-1: cifs-utils vulnerabilities