Privilege Escalation Vulnerability Found in Linux CIFS Module... Root Execution via Fake Key Descriptor

A flaw in the Linux kernel CIFS module and cifs-utils failed to verify the source of key descriptors.

An attacker can feed a forged descriptor into request_key() to trigger a root helper in their own namespace.

That can be used to load malicious modules and achieve local privilege escalation to full system compromise.