Every CVE Search/ Get API key

CVE-2026-6949

samba: Fix of CVE-2026-6949

8.8 HighFix available
  • CVE-2026-6949: correctly truncate the buffer used for DNS TSIG verification so a crafted TSIG record with name compression cannot underflow the packet length and trigger an out-of-bounds write in the AD DC internal DNS server

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

What each source reports

OSV Score usedOESA-2026-3295 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3295
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV Score usedOESA-2026-3296 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3296
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV Score usedOESA-2026-3297 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3297
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV Score usedOESA-2026-3366 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3366
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV Score usedOESA-2026-3367 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3367
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2026-1786093517 No score

samba: Fix of CVE-2026-6949

  • CVE-2026-6949: correctly truncate the buffer used for DNS TSIG verification so a crafted TSIG record with name compression cannot underflow the packet length and trigger an out-of-bounds write in the AD DC internal DNS server
Record
CLSA-2026-1786093517
Updated
2026-11-02
Show 15 moreShow less
OSVCLSA-2026-1786477676 No score

Fix CVE(s): CVE-2026-6949

  • SECURITY UPDATE: out-of-bounds write in the internal DNS server via a TSIG-signed packet using DNS name compression
    • debian/patches/CVE-2026-6949.patch: record the start offset of each dns_res_rec while pulling it and use the last additional record's offset to truncate the buffer for TSIG verification, instead of subtracting a re-pushed TSIG record length that can exceed the packet and underflow packet_len into a huge memcpy() size
    • CVE-2026-6949
Record
CLSA-2026-1786477676
Updated
2026-11-02
OSVopenSUSE-SU-2026:11431-1 No score

ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media

These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11431-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21475-1 No score

Security update for samba

This update for samba fixes the following issues:

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
openSUSE-SU-2026:21475-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21540-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
openSUSE-SU-2026:21540-1
Updated
2026-11-02
OSVSUSE-SU-2026:22977-1 No score

Security update for samba

This update for samba fixes the following issues:

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:22977-1
Updated
2026-11-02
OSVSUSE-SU-2026:23003-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23003-1
Updated
2026-11-02
OSVSUSE-SU-2026:23129-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23129-1
Updated
2026-11-02
OSVSUSE-SU-2026:23152-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23152-1
Updated
2026-11-02
OSVSUSE-SU-2026:3362-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3362-1
Updated
2026-11-02
OSVSUSE-SU-2026:3363-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3363-1
Updated
2026-11-02
OSVSUSE-SU-2026:3364-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3364-1
Updated
2026-11-02
OSVSUSE-SU-2026:3365-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3365-1
Updated
2026-11-02
OSVSUSE-SU-2026:3366-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3366-1
Updated
2026-11-02
OSVSUSE-SU-2026:3367-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3367-1
Updated
2026-11-02
OSVUBUNTU-CVE-2026-6949 No score

TSIG packet with name compression can crash DNS. Incorrect size calculations when a TSIG record contains compressed names can lead to a large out-of-bounds write causing the server to crash.

Record
UBUNTU-CVE-2026-6949
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
ctdb
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
ldb-tools
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
libldb
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
libldb-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
libnetapi
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
libnetapi-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
libsmbclient
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
libsmbclient-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
libwbclient
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
libwbclient-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
Show 91 moreShow less
Affected packages
PackageAffectedFixed
python3-ldb
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
python3-samba
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
python3-samba-dc
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
python3-samba-test
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-client
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-client-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-common
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-common-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-common-tools
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-dc-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-dcerpc
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-gpupdate
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-krb5-printing
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-ldb-ldap-modules
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-pidl
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-test
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-test-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-tools
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-usershares
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-vfs-iouring
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-winbind
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-winbind-clients
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-winbind-krb5-locator
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-winbind-modules
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
samba-winexe
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els7
4.21.3-14.el9_6.tuxcare.els7
ctdb
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
libnss-winbind
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
libpam-winbind
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
libsmbclient
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
libsmbclient-dev
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
libwbclient-dev
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
libwbclient0
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
python-samba
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
registry-tools
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
samba
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
samba-common
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
samba-common-bin
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
samba-dev
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
samba-dsdb-modules
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
samba-libs
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
samba-testsuite
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
samba-vfs-modules
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
smbclient
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
winbind
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
2:4.9.5+dfsg-5+deb10u5+tuxcare.els9
samba
Debian:12
 All versions, plus listed versions
2:4.17.10+dfsg-0+deb12u12:4.17.10+dfsg-0+deb12u1~bpo11+12:4.17.11+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u1~bpo11+1
Show 45 moreShow less
2:4.17.12+dfsg-0+deb12u22:4.17.12+dfsg-0+deb12u32:4.17.12+dfsg-0+deb12u42:4.17.8+dfsg-22:4.17.8+dfsg-2.12:4.17.9+dfsg-0+deb12u12:4.17.9+dfsg-0+deb12u22:4.17.9+dfsg-0+deb12u32:4.17.9+dfsg-0+deb12u3~bpo11+12:4.18.0+dfsg-1~exp12:4.18.0~rc1+dfsg-1exp2:4.18.0~rc2+dfsg-12:4.18.0~rc3+dfsg-12:4.18.0~rc4+dfsg-12:4.18.1+dfsg-1~exp12:4.18.2+dfsg-12:4.18.3+dfsg-12:4.18.3+dfsg-22:4.18.3+dfsg-32:4.18.4+dfsg-12:4.18.4+dfsg-22:4.18.4+dfsg-2~bpo12+12:4.18.5+dfsg-12:4.18.5+dfsg-22:4.18.5+dfsg-2~bpo12+12:4.18.6+dfsg-12:4.18.6+dfsg-1~bpo12+12:4.18.8+dfsg-1~bpo12+12:4.19.0+dfsg-12:4.19.0~rc1+dfsg-12:4.19.0~rc1+dfsg-22:4.19.0~rc1+dfsg-32:4.19.0~rc2+dfsg-12:4.19.0~rc4+dfsg-12:4.19.0~rc4+dfsg-22:4.19.1+dfsg-12:4.19.1+dfsg-22:4.19.1+dfsg-32:4.19.1+dfsg-42:4.19.2+dfsg-12:4.19.3+dfsg-12:4.19.3+dfsg-1~bpo12+12:4.19.3+dfsg-22:4.19.4+dfsg-12:4.19.4+dfsg-2
 None known
samba
Debian:13
 before 2:4.22.10+dfsg-0+deb13u2, plus listed versions
2:4.22.10+dfsg-0+deb13u12:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+1
Show 4 moreShow less
2:4.22.6+dfsg-0+deb13u12:4.22.6+dfsg-0+deb13u1~bpo12+12:4.22.8+dfsg-0+deb13u12:4.22.8+dfsg-0+deb13u2
2:4.22.10+dfsg-0+deb13u2
samba
Debian:14
 before 2:4.24.5+dfsg-1, plus listed versions
2:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+12:4.23.0+dfsg-1
Show 29 moreShow less
2:4.23.0+dfsg-22:4.23.0+dfsg-32:4.23.0~rc1+dfsg-12:4.23.0~rc2+dfsg-12:4.23.0~rc3+dfsg-12:4.23.1+dfsg-12:4.23.2+dfsg-12:4.23.3+dfsg-12:4.23.3+dfsg-1~bpo13+12:4.23.4+dfsg-12:4.23.4+dfsg-1~bpo13+12:4.23.5+dfsg-12:4.23.5+dfsg-1~bpo13+12:4.23.6+dfsg-12:4.23.6+dfsg-22:4.23.6+dfsg-2~bpo13+12:4.24.0+dfsg-12:4.24.0~rc1+dfsg-12:4.24.0~rc1+dfsg-22:4.24.0~rc1+dfsg-32:4.24.0~rc2+dfsg-12:4.24.1+dfsg-12:4.24.2+dfsg-12:4.24.2+dfsg-1~bpo13+12:4.24.3+dfsg-12:4.24.3+dfsg-1~bpo13+12:4.24.4+dfsg-12:4.24.4+dfsg-1~bpo13+12:4.24.5+dfsg-1~bpo13+1
2:4.24.5+dfsg-1
samba
openEuler:22.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.17.5-17.oe2203sp4
4.17.5-17.oe2203sp4
samba
openEuler:24.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.19.3-10.oe2403sp4
4.19.3-10.oe2403sp4
samba
openEuler:20.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.11.12-39.oe2003sp4
4.11.12-39.oe2003sp4
samba
openEuler:24.03-LTS-SP1
From an advisory covering 6 CVEs
 before 4.19.3-10.oe2403sp1
4.19.3-10.oe2403sp1
samba
openEuler:24.03-LTS-SP3
From an advisory covering 6 CVEs
 before 4.19.3-10.oe2403sp3
4.19.3-10.oe2403sp3
samba
SUSE:Linux Micro 6.2
From an advisory covering 7 CVEs
 before 4.22.9+git.538.af6cb4fb2e-160000.1.1
4.22.9+git.538.af6cb4fb2e-160000.1.1
samba
SUSE:Linux Micro 6.2
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 7 CVEs
 before 4.21.10+git.533.31d7e5508d-150700.3.29.1
4.21.10+git.533.31d7e5508d-150700.3.29.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 7 CVEs
 before 4.21.10+git.533.31d7e5508d-150700.3.29.1
4.21.10+git.533.31d7e5508d-150700.3.29.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Enterprise Storage 7.1
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150300.3.106.1
4.15.13+git.808.eeca19f5e1-150300.3.106.1
samba
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3
Show 45 moreShow less
2:4.1.3+dfsg-2ubuntu42:4.1.3+dfsg-2ubuntu52:4.1.6+dfsg-1ubuntu12:4.1.6+dfsg-1ubuntu22:4.1.6+dfsg-1ubuntu2.14.04.12:4.1.6+dfsg-1ubuntu2.14.04.22:4.1.6+dfsg-1ubuntu2.14.04.32:4.1.6+dfsg-1ubuntu2.14.04.42:4.1.6+dfsg-1ubuntu2.14.04.52:4.1.6+dfsg-1ubuntu2.14.04.72:4.1.6+dfsg-1ubuntu2.14.04.82:4.1.6+dfsg-1ubuntu2.14.04.92:4.1.6+dfsg-1ubuntu2.14.04.112:4.1.6+dfsg-1ubuntu2.14.04.122:4.1.6+dfsg-1ubuntu2.14.04.132:4.3.8+dfsg-0ubuntu0.14.04.22:4.3.9+dfsg-0ubuntu0.14.04.12:4.3.9+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.12:4.3.11+dfsg-0ubuntu0.14.04.22:4.3.11+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.42:4.3.11+dfsg-0ubuntu0.14.04.62:4.3.11+dfsg-0ubuntu0.14.04.72:4.3.11+dfsg-0ubuntu0.14.04.82:4.3.11+dfsg-0ubuntu0.14.04.92:4.3.11+dfsg-0ubuntu0.14.04.102:4.3.11+dfsg-0ubuntu0.14.04.112:4.3.11+dfsg-0ubuntu0.14.04.122:4.3.11+dfsg-0ubuntu0.14.04.132:4.3.11+dfsg-0ubuntu0.14.04.142:4.3.11+dfsg-0ubuntu0.14.04.162:4.3.11+dfsg-0ubuntu0.14.04.172:4.3.11+dfsg-0ubuntu0.14.04.192:4.3.11+dfsg-0ubuntu0.14.04.202:4.3.11+dfsg-0ubuntu0.14.04.20+esm12:4.3.11+dfsg-0ubuntu0.14.04.20+esm22:4.3.11+dfsg-0ubuntu0.14.04.20+esm32:4.3.11+dfsg-0ubuntu0.14.04.20+esm42:4.3.11+dfsg-0ubuntu0.14.04.20+esm62:4.3.11+dfsg-0ubuntu0.14.04.20+esm72:4.3.11+dfsg-0ubuntu0.14.04.20+esm82:4.3.11+dfsg-0ubuntu0.14.04.20+esm92:4.3.11+dfsg-0ubuntu0.14.04.20+esm112:4.3.11+dfsg-0ubuntu0.14.04.20+esm12
 None known
samba
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:4.1.17+dfsg-4ubuntu22:4.1.20+dfsg-1ubuntu12:4.1.20+dfsg-1ubuntu22:4.1.20+dfsg-1ubuntu32:4.1.20+dfsg-1ubuntu5
Show 41 moreShow less
2:4.3.3+dfsg-1ubuntu12:4.3.3+dfsg-1ubuntu22:4.3.3+dfsg-1ubuntu32:4.3.6+dfsg-1ubuntu12:4.3.8+dfsg-0ubuntu12:4.3.9+dfsg-0ubuntu0.16.04.12:4.3.9+dfsg-0ubuntu0.16.04.22:4.3.9+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.12:4.3.11+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.52:4.3.11+dfsg-0ubuntu0.16.04.62:4.3.11+dfsg-0ubuntu0.16.04.72:4.3.11+dfsg-0ubuntu0.16.04.82:4.3.11+dfsg-0ubuntu0.16.04.92:4.3.11+dfsg-0ubuntu0.16.04.102:4.3.11+dfsg-0ubuntu0.16.04.112:4.3.11+dfsg-0ubuntu0.16.04.122:4.3.11+dfsg-0ubuntu0.16.04.132:4.3.11+dfsg-0ubuntu0.16.04.152:4.3.11+dfsg-0ubuntu0.16.04.162:4.3.11+dfsg-0ubuntu0.16.04.172:4.3.11+dfsg-0ubuntu0.16.04.182:4.3.11+dfsg-0ubuntu0.16.04.192:4.3.11+dfsg-0ubuntu0.16.04.202:4.3.11+dfsg-0ubuntu0.16.04.212:4.3.11+dfsg-0ubuntu0.16.04.232:4.3.11+dfsg-0ubuntu0.16.04.242:4.3.11+dfsg-0ubuntu0.16.04.252:4.3.11+dfsg-0ubuntu0.16.04.262:4.3.11+dfsg-0ubuntu0.16.04.272:4.3.11+dfsg-0ubuntu0.16.04.282:4.3.11+dfsg-0ubuntu0.16.04.292:4.3.11+dfsg-0ubuntu0.16.04.302:4.3.11+dfsg-0ubuntu0.16.04.312:4.3.11+dfsg-0ubuntu0.16.04.322:4.3.11+dfsg-0ubuntu0.16.04.342:4.3.11+dfsg-0ubuntu0.16.04.34+esm12:4.3.11+dfsg-0ubuntu0.16.04.34+esm22:4.3.11+dfsg-0ubuntu0.16.04.34+esm32:4.3.11+dfsg-0ubuntu0.16.04.34+esm4
 None known
samba
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:4.6.7+dfsg-1ubuntu32:4.7.1+dfsg-1ubuntu12:4.7.3+dfsg-1ubuntu12:4.7.4+dfsg-1ubuntu12:4.7.6+dfsg~ubuntu-0ubuntu1
Show 27 moreShow less
2:4.7.6+dfsg~ubuntu-0ubuntu22:4.7.6+dfsg~ubuntu-0ubuntu2.22:4.7.6+dfsg~ubuntu-0ubuntu2.42:4.7.6+dfsg~ubuntu-0ubuntu2.52:4.7.6+dfsg~ubuntu-0ubuntu2.62:4.7.6+dfsg~ubuntu-0ubuntu2.72:4.7.6+dfsg~ubuntu-0ubuntu2.92:4.7.6+dfsg~ubuntu-0ubuntu2.102:4.7.6+dfsg~ubuntu-0ubuntu2.112:4.7.6+dfsg~ubuntu-0ubuntu2.132:4.7.6+dfsg~ubuntu-0ubuntu2.142:4.7.6+dfsg~ubuntu-0ubuntu2.152:4.7.6+dfsg~ubuntu-0ubuntu2.162:4.7.6+dfsg~ubuntu-0ubuntu2.172:4.7.6+dfsg~ubuntu-0ubuntu2.182:4.7.6+dfsg~ubuntu-0ubuntu2.192:4.7.6+dfsg~ubuntu-0ubuntu2.202:4.7.6+dfsg~ubuntu-0ubuntu2.212:4.7.6+dfsg~ubuntu-0ubuntu2.232:4.7.6+dfsg~ubuntu-0ubuntu2.242:4.7.6+dfsg~ubuntu-0ubuntu2.262:4.7.6+dfsg~ubuntu-0ubuntu2.272:4.7.6+dfsg~ubuntu-0ubuntu2.282:4.7.6+dfsg~ubuntu-0ubuntu2.292:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm12:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm22:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
 None known
samba
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4
Show 32 moreShow less
2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.12:4.15.13+dfsg-0ubuntu0.20.04.22:4.15.13+dfsg-0ubuntu0.20.04.32:4.15.13+dfsg-0ubuntu0.20.04.42:4.15.13+dfsg-0ubuntu0.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.62:4.15.13+dfsg-0ubuntu0.20.04.72:4.15.13+dfsg-0ubuntu0.20.04.82:4.15.13+dfsg-0ubuntu0.20.04.8+esm12:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
 None known
samba
Ubuntu:22.04:LTS
 before 2:4.15.13+dfsg-0ubuntu1.13, plus listed versions
2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1
Show 18 moreShow less
2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu12:4.15.13+dfsg-0ubuntu1.12:4.15.13+dfsg-0ubuntu1.22:4.15.13+dfsg-0ubuntu1.32:4.15.13+dfsg-0ubuntu1.42:4.15.13+dfsg-0ubuntu1.52:4.15.13+dfsg-0ubuntu1.62:4.15.13+dfsg-0ubuntu1.72:4.15.13+dfsg-0ubuntu1.82:4.15.13+dfsg-0ubuntu1.92:4.15.13+dfsg-0ubuntu1.102:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13
samba
Ubuntu:24.04:LTS
 before 2:4.19.5+dfsg-4ubuntu9.7, plus listed versions
2:4.18.6+dfsg-1ubuntu22:4.18.6+dfsg-1ubuntu2.12:4.18.6+dfsg-1ubuntu2.22:4.19.4+dfsg-3ubuntu12:4.19.5+dfsg-1ubuntu1
Show 7 moreShow less
2:4.19.5+dfsg-4ubuntu72:4.19.5+dfsg-4ubuntu82:4.19.5+dfsg-4ubuntu92:4.19.5+dfsg-4ubuntu9.22:4.19.5+dfsg-4ubuntu9.32:4.19.5+dfsg-4ubuntu9.42:4.19.5+dfsg-4ubuntu9.6
2:4.19.5+dfsg-4ubuntu9.7
samba
Ubuntu:26.04:LTS
 before 2:4.23.6+dfsg-1ubuntu2.2, plus listed versions
2:4.22.3+dfsg-4ubuntu22:4.22.3+dfsg-4ubuntu2.12:4.22.3+dfsg-4ubuntu32:4.22.3+dfsg-4ubuntu42:4.23.4+dfsg-1ubuntu1
Show 4 moreShow less
2:4.23.5+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu12:4.23.6+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu2.1
2:4.23.6+dfsg-1ubuntu2.2
samba
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 4.24.5+git.481.dba78dbdea-1.1
4.24.5+git.481.dba78dbdea-1.1
samba
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 4.22.9+git.538.af6cb4fb2e-160000.1.1
4.22.9+git.538.af6cb4fb2e-160000.1.1
samba
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1

History

History
RecordedChangedSources
affected, facts
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-6949 is a high vulnerability (CVSS 8.8) in samba, published July 28, 2026. No source lists public exploit code. Fixed in ctdb 4.21.3-14.el9_6.tuxcare.els7.

References

Show 48 moreShow less
This page doesn't list everything

Left out here: 128 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open