A newly discovered local privilege escalation vulnerability dubbed 'CIFSwitch' in the Linux kernel could allow attackers to forge CIFS authentication key descriptions, abuse the kernel's key request mechanism, and gain root privileges. [...]
New CIFSwitch Linux flaw gives root on multiple distributions
Résumé + lien vers la source. Sans paywall, sans tracking.