CVE-2026-104715: mount option injection in cifs-utils mount.cifs, fixed in version 7.9

Advisory published on October 16 on the oss-sec feed and relayed as a machine translation. According to the text, cifs-utils 7.9 fixes a mount option injection vulnerability in mount.cifs that may allow local privilege escalation in affected privileged mount configurations. Affected versions: 4.2 through 7.8. The recommendation is to upgrade to 7.9; distributors may alternatively apply the fixes retroactively. The credits name the reporter and the patch author; the names appear only in the original source. The text also announces the cifs-utils 7.9 release, but the full release notes do not appear in the excerpt. Relevance for Rota Nacional: the platform does not patch or update operating system packages. If your team uses AI to study the advisory or plan the upgrade, do not paste mount configurations, credentials, share paths or logs with identifiers; use generic descriptions. To verify, check the original source and your distributor's documentation, and confirm the installed version with your package manager.