Every CVE Search/ Get API key

CVE-2026-58221

samba security update

8.8 HighPublic exploitFix available

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

What each source reports

OSV Score usedOESA-2026-3295 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3295
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV Score usedOESA-2026-3296 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3296
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV Score usedOESA-2026-3297 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3297
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV Score usedOESA-2026-3366 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3366
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV Score usedOESA-2026-3367 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3367
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2026:11431-1 No score

ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media

These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11431-1
Updated
2026-11-02
Show 13 moreShow less
OSVopenSUSE-SU-2026:21475-1 No score

Security update for samba

This update for samba fixes the following issues:

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
openSUSE-SU-2026:21475-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21540-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
openSUSE-SU-2026:21540-1
Updated
2026-11-02
OSVSUSE-SU-2026:22977-1 No score

Security update for samba

This update for samba fixes the following issues:

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:22977-1
Updated
2026-11-02
OSVSUSE-SU-2026:23003-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23003-1
Updated
2026-11-02
OSVSUSE-SU-2026:23129-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23129-1
Updated
2026-11-02
OSVSUSE-SU-2026:23152-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23152-1
Updated
2026-11-02
OSVSUSE-SU-2026:3362-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3362-1
Updated
2026-11-02
OSVSUSE-SU-2026:3363-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3363-1
Updated
2026-11-02
OSVSUSE-SU-2026:3364-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3364-1
Updated
2026-11-02
OSVSUSE-SU-2026:3365-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3365-1
Updated
2026-11-02
OSVSUSE-SU-2026:3366-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3366-1
Updated
2026-11-02
OSVSUSE-SU-2026:3367-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3367-1
Updated
2026-11-02
OSVUBUNTU-CVE-2026-58221 No score

Samba AD authenticated LDAP access domain takeover. Samba AD low-privilege authenticated LDAP access allows modifications to internal LDB special DNs, which permits a domain takeover.

Record
UBUNTU-CVE-2026-58221
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
samba
Debian:12
 All versions, plus listed versions
2:4.17.10+dfsg-0+deb12u12:4.17.10+dfsg-0+deb12u1~bpo11+12:4.17.11+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u1~bpo11+1
Show 45 moreShow less
2:4.17.12+dfsg-0+deb12u22:4.17.12+dfsg-0+deb12u32:4.17.12+dfsg-0+deb12u42:4.17.8+dfsg-22:4.17.8+dfsg-2.12:4.17.9+dfsg-0+deb12u12:4.17.9+dfsg-0+deb12u22:4.17.9+dfsg-0+deb12u32:4.17.9+dfsg-0+deb12u3~bpo11+12:4.18.0+dfsg-1~exp12:4.18.0~rc1+dfsg-1exp2:4.18.0~rc2+dfsg-12:4.18.0~rc3+dfsg-12:4.18.0~rc4+dfsg-12:4.18.1+dfsg-1~exp12:4.18.2+dfsg-12:4.18.3+dfsg-12:4.18.3+dfsg-22:4.18.3+dfsg-32:4.18.4+dfsg-12:4.18.4+dfsg-22:4.18.4+dfsg-2~bpo12+12:4.18.5+dfsg-12:4.18.5+dfsg-22:4.18.5+dfsg-2~bpo12+12:4.18.6+dfsg-12:4.18.6+dfsg-1~bpo12+12:4.18.8+dfsg-1~bpo12+12:4.19.0+dfsg-12:4.19.0~rc1+dfsg-12:4.19.0~rc1+dfsg-22:4.19.0~rc1+dfsg-32:4.19.0~rc2+dfsg-12:4.19.0~rc4+dfsg-12:4.19.0~rc4+dfsg-22:4.19.1+dfsg-12:4.19.1+dfsg-22:4.19.1+dfsg-32:4.19.1+dfsg-42:4.19.2+dfsg-12:4.19.3+dfsg-12:4.19.3+dfsg-1~bpo12+12:4.19.3+dfsg-22:4.19.4+dfsg-12:4.19.4+dfsg-2
 None known
samba
Debian:13
 before 2:4.22.10+dfsg-0+deb13u2, plus listed versions
2:4.22.10+dfsg-0+deb13u12:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+1
Show 4 moreShow less
2:4.22.6+dfsg-0+deb13u12:4.22.6+dfsg-0+deb13u1~bpo12+12:4.22.8+dfsg-0+deb13u12:4.22.8+dfsg-0+deb13u2
2:4.22.10+dfsg-0+deb13u2
samba
Debian:14
 before 2:4.24.5+dfsg-1, plus listed versions
2:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+12:4.23.0+dfsg-1
Show 29 moreShow less
2:4.23.0+dfsg-22:4.23.0+dfsg-32:4.23.0~rc1+dfsg-12:4.23.0~rc2+dfsg-12:4.23.0~rc3+dfsg-12:4.23.1+dfsg-12:4.23.2+dfsg-12:4.23.3+dfsg-12:4.23.3+dfsg-1~bpo13+12:4.23.4+dfsg-12:4.23.4+dfsg-1~bpo13+12:4.23.5+dfsg-12:4.23.5+dfsg-1~bpo13+12:4.23.6+dfsg-12:4.23.6+dfsg-22:4.23.6+dfsg-2~bpo13+12:4.24.0+dfsg-12:4.24.0~rc1+dfsg-12:4.24.0~rc1+dfsg-22:4.24.0~rc1+dfsg-32:4.24.0~rc2+dfsg-12:4.24.1+dfsg-12:4.24.2+dfsg-12:4.24.2+dfsg-1~bpo13+12:4.24.3+dfsg-12:4.24.3+dfsg-1~bpo13+12:4.24.4+dfsg-12:4.24.4+dfsg-1~bpo13+12:4.24.5+dfsg-1~bpo13+1
2:4.24.5+dfsg-1
samba
openEuler:22.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.17.5-17.oe2203sp4
4.17.5-17.oe2203sp4
samba
openEuler:24.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.19.3-10.oe2403sp4
4.19.3-10.oe2403sp4
samba
openEuler:20.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.11.12-39.oe2003sp4
4.11.12-39.oe2003sp4
samba
openEuler:24.03-LTS-SP1
From an advisory covering 6 CVEs
 before 4.19.3-10.oe2403sp1
4.19.3-10.oe2403sp1
samba
openEuler:24.03-LTS-SP3
From an advisory covering 6 CVEs
 before 4.19.3-10.oe2403sp3
4.19.3-10.oe2403sp3
samba
SUSE:Linux Micro 6.2
From an advisory covering 7 CVEs
 before 4.22.9+git.538.af6cb4fb2e-160000.1.1
4.22.9+git.538.af6cb4fb2e-160000.1.1
samba
SUSE:Linux Micro 6.2
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
Show 34 moreShow less
Affected packages
PackageAffectedFixed
samba
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 7 CVEs
 before 4.21.10+git.533.31d7e5508d-150700.3.29.1
4.21.10+git.533.31d7e5508d-150700.3.29.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 7 CVEs
 before 4.21.10+git.533.31d7e5508d-150700.3.29.1
4.21.10+git.533.31d7e5508d-150700.3.29.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Enterprise Storage 7.1
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150300.3.106.1
4.15.13+git.808.eeca19f5e1-150300.3.106.1
samba
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3
Show 45 moreShow less
2:4.1.3+dfsg-2ubuntu42:4.1.3+dfsg-2ubuntu52:4.1.6+dfsg-1ubuntu12:4.1.6+dfsg-1ubuntu22:4.1.6+dfsg-1ubuntu2.14.04.12:4.1.6+dfsg-1ubuntu2.14.04.22:4.1.6+dfsg-1ubuntu2.14.04.32:4.1.6+dfsg-1ubuntu2.14.04.42:4.1.6+dfsg-1ubuntu2.14.04.52:4.1.6+dfsg-1ubuntu2.14.04.72:4.1.6+dfsg-1ubuntu2.14.04.82:4.1.6+dfsg-1ubuntu2.14.04.92:4.1.6+dfsg-1ubuntu2.14.04.112:4.1.6+dfsg-1ubuntu2.14.04.122:4.1.6+dfsg-1ubuntu2.14.04.132:4.3.8+dfsg-0ubuntu0.14.04.22:4.3.9+dfsg-0ubuntu0.14.04.12:4.3.9+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.12:4.3.11+dfsg-0ubuntu0.14.04.22:4.3.11+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.42:4.3.11+dfsg-0ubuntu0.14.04.62:4.3.11+dfsg-0ubuntu0.14.04.72:4.3.11+dfsg-0ubuntu0.14.04.82:4.3.11+dfsg-0ubuntu0.14.04.92:4.3.11+dfsg-0ubuntu0.14.04.102:4.3.11+dfsg-0ubuntu0.14.04.112:4.3.11+dfsg-0ubuntu0.14.04.122:4.3.11+dfsg-0ubuntu0.14.04.132:4.3.11+dfsg-0ubuntu0.14.04.142:4.3.11+dfsg-0ubuntu0.14.04.162:4.3.11+dfsg-0ubuntu0.14.04.172:4.3.11+dfsg-0ubuntu0.14.04.192:4.3.11+dfsg-0ubuntu0.14.04.202:4.3.11+dfsg-0ubuntu0.14.04.20+esm12:4.3.11+dfsg-0ubuntu0.14.04.20+esm22:4.3.11+dfsg-0ubuntu0.14.04.20+esm32:4.3.11+dfsg-0ubuntu0.14.04.20+esm42:4.3.11+dfsg-0ubuntu0.14.04.20+esm62:4.3.11+dfsg-0ubuntu0.14.04.20+esm72:4.3.11+dfsg-0ubuntu0.14.04.20+esm82:4.3.11+dfsg-0ubuntu0.14.04.20+esm92:4.3.11+dfsg-0ubuntu0.14.04.20+esm112:4.3.11+dfsg-0ubuntu0.14.04.20+esm12
 None known
samba
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:4.1.17+dfsg-4ubuntu22:4.1.20+dfsg-1ubuntu12:4.1.20+dfsg-1ubuntu22:4.1.20+dfsg-1ubuntu32:4.1.20+dfsg-1ubuntu5
Show 41 moreShow less
2:4.3.3+dfsg-1ubuntu12:4.3.3+dfsg-1ubuntu22:4.3.3+dfsg-1ubuntu32:4.3.6+dfsg-1ubuntu12:4.3.8+dfsg-0ubuntu12:4.3.9+dfsg-0ubuntu0.16.04.12:4.3.9+dfsg-0ubuntu0.16.04.22:4.3.9+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.12:4.3.11+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.52:4.3.11+dfsg-0ubuntu0.16.04.62:4.3.11+dfsg-0ubuntu0.16.04.72:4.3.11+dfsg-0ubuntu0.16.04.82:4.3.11+dfsg-0ubuntu0.16.04.92:4.3.11+dfsg-0ubuntu0.16.04.102:4.3.11+dfsg-0ubuntu0.16.04.112:4.3.11+dfsg-0ubuntu0.16.04.122:4.3.11+dfsg-0ubuntu0.16.04.132:4.3.11+dfsg-0ubuntu0.16.04.152:4.3.11+dfsg-0ubuntu0.16.04.162:4.3.11+dfsg-0ubuntu0.16.04.172:4.3.11+dfsg-0ubuntu0.16.04.182:4.3.11+dfsg-0ubuntu0.16.04.192:4.3.11+dfsg-0ubuntu0.16.04.202:4.3.11+dfsg-0ubuntu0.16.04.212:4.3.11+dfsg-0ubuntu0.16.04.232:4.3.11+dfsg-0ubuntu0.16.04.242:4.3.11+dfsg-0ubuntu0.16.04.252:4.3.11+dfsg-0ubuntu0.16.04.262:4.3.11+dfsg-0ubuntu0.16.04.272:4.3.11+dfsg-0ubuntu0.16.04.282:4.3.11+dfsg-0ubuntu0.16.04.292:4.3.11+dfsg-0ubuntu0.16.04.302:4.3.11+dfsg-0ubuntu0.16.04.312:4.3.11+dfsg-0ubuntu0.16.04.322:4.3.11+dfsg-0ubuntu0.16.04.342:4.3.11+dfsg-0ubuntu0.16.04.34+esm12:4.3.11+dfsg-0ubuntu0.16.04.34+esm22:4.3.11+dfsg-0ubuntu0.16.04.34+esm32:4.3.11+dfsg-0ubuntu0.16.04.34+esm4
 None known
samba
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:4.6.7+dfsg-1ubuntu32:4.7.1+dfsg-1ubuntu12:4.7.3+dfsg-1ubuntu12:4.7.4+dfsg-1ubuntu12:4.7.6+dfsg~ubuntu-0ubuntu1
Show 27 moreShow less
2:4.7.6+dfsg~ubuntu-0ubuntu22:4.7.6+dfsg~ubuntu-0ubuntu2.22:4.7.6+dfsg~ubuntu-0ubuntu2.42:4.7.6+dfsg~ubuntu-0ubuntu2.52:4.7.6+dfsg~ubuntu-0ubuntu2.62:4.7.6+dfsg~ubuntu-0ubuntu2.72:4.7.6+dfsg~ubuntu-0ubuntu2.92:4.7.6+dfsg~ubuntu-0ubuntu2.102:4.7.6+dfsg~ubuntu-0ubuntu2.112:4.7.6+dfsg~ubuntu-0ubuntu2.132:4.7.6+dfsg~ubuntu-0ubuntu2.142:4.7.6+dfsg~ubuntu-0ubuntu2.152:4.7.6+dfsg~ubuntu-0ubuntu2.162:4.7.6+dfsg~ubuntu-0ubuntu2.172:4.7.6+dfsg~ubuntu-0ubuntu2.182:4.7.6+dfsg~ubuntu-0ubuntu2.192:4.7.6+dfsg~ubuntu-0ubuntu2.202:4.7.6+dfsg~ubuntu-0ubuntu2.212:4.7.6+dfsg~ubuntu-0ubuntu2.232:4.7.6+dfsg~ubuntu-0ubuntu2.242:4.7.6+dfsg~ubuntu-0ubuntu2.262:4.7.6+dfsg~ubuntu-0ubuntu2.272:4.7.6+dfsg~ubuntu-0ubuntu2.282:4.7.6+dfsg~ubuntu-0ubuntu2.292:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm12:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm22:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
 None known
samba
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4
Show 32 moreShow less
2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.12:4.15.13+dfsg-0ubuntu0.20.04.22:4.15.13+dfsg-0ubuntu0.20.04.32:4.15.13+dfsg-0ubuntu0.20.04.42:4.15.13+dfsg-0ubuntu0.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.62:4.15.13+dfsg-0ubuntu0.20.04.72:4.15.13+dfsg-0ubuntu0.20.04.82:4.15.13+dfsg-0ubuntu0.20.04.8+esm12:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
 None known
samba
Ubuntu:22.04:LTS
 before 2:4.15.13+dfsg-0ubuntu1.13, plus listed versions
2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1
Show 18 moreShow less
2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu12:4.15.13+dfsg-0ubuntu1.12:4.15.13+dfsg-0ubuntu1.22:4.15.13+dfsg-0ubuntu1.32:4.15.13+dfsg-0ubuntu1.42:4.15.13+dfsg-0ubuntu1.52:4.15.13+dfsg-0ubuntu1.62:4.15.13+dfsg-0ubuntu1.72:4.15.13+dfsg-0ubuntu1.82:4.15.13+dfsg-0ubuntu1.92:4.15.13+dfsg-0ubuntu1.102:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13
samba
Ubuntu:24.04:LTS
 before 2:4.19.5+dfsg-4ubuntu9.7, plus listed versions
2:4.18.6+dfsg-1ubuntu22:4.18.6+dfsg-1ubuntu2.12:4.18.6+dfsg-1ubuntu2.22:4.19.4+dfsg-3ubuntu12:4.19.5+dfsg-1ubuntu1
Show 7 moreShow less
2:4.19.5+dfsg-4ubuntu72:4.19.5+dfsg-4ubuntu82:4.19.5+dfsg-4ubuntu92:4.19.5+dfsg-4ubuntu9.22:4.19.5+dfsg-4ubuntu9.32:4.19.5+dfsg-4ubuntu9.42:4.19.5+dfsg-4ubuntu9.6
2:4.19.5+dfsg-4ubuntu9.7
samba
Ubuntu:26.04:LTS
 before 2:4.23.6+dfsg-1ubuntu2.2, plus listed versions
2:4.22.3+dfsg-4ubuntu22:4.22.3+dfsg-4ubuntu2.12:4.22.3+dfsg-4ubuntu32:4.22.3+dfsg-4ubuntu42:4.23.4+dfsg-1ubuntu1
Show 4 moreShow less
2:4.23.5+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu12:4.23.6+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu2.1
2:4.23.6+dfsg-1ubuntu2.2
samba
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 4.24.5+git.481.dba78dbdea-1.1
4.24.5+git.481.dba78dbdea-1.1
samba
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 4.22.9+git.538.af6cb4fb2e-160000.1.1
4.22.9+git.538.af6cb4fb2e-160000.1.1
samba
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubDevAli00/CVE-2026-582212026-10-18

History

History
RecordedChangedSources
affected, facts
first indexedOSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-58221 is a high vulnerability (CVSS 8.8) in samba, published July 28, 2026. Public exploit code exists. Fixed in samba 2:4.22.10+dfsg-0+deb13u2.

References

Show 46 moreShow less
This page doesn't list everything

Left out here: 128 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open