Every CVE Search/ Get API key

CVE-2026-15779

Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation

6.1 MediumFix available

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
High

Exploit likelihood

0.10%Unchanged since Jul 16, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.1

Samba-winbind: samba: pam_winbind mkhomedir chowns critical system paths without validation

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.

Record
CVE-2026-15779
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-732
Updated
2026-11-05
EUVDEUVD-2026-44662 6.1

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.

Record
EUVD-2026-44662
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-05
GitHub AdvisoriesGHSA-6fmw-7w5g-3pf9 6.1

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target...

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.

Record
GHSA-6fmw-7w5g-3pf9
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-732
Updated
2026-11-02
NVD 6.1

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.

Record
CVE-2026-15779
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-732
Updated
2026-11-05
OSVDEBIAN-CVE-2026-15779 6.1

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.

Record
DEBIAN-CVE-2026-15779
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-06
OSVOESA-2026-3364 6.1

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.(CVE-2026-15779)

Record
OESA-2026-3364
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVOESA-2026-3365 6.1

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.(CVE-2026-15779)

Record
OESA-2026-3365
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVOESA-2026-3410 6.1

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.(CVE-2026-15779)

Record
OESA-2026-3410
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVOESA-2026-3411 6.1

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.(CVE-2026-15779)

Record
OESA-2026-3411
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVOESA-2026-3412 6.1

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.(CVE-2026-15779)

Record
OESA-2026-3412
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-15779 6.1

A flaw was found in samba's pam_winbind. When mkhomedir is enabled, pam_winbind chowns the target account's home directory without validating the path is not a critical system directory such as /. On affected systems, accounts with / as their home directory (a common default for system accounts) can have this triggered not only by root, but by a non-root user holding a narrow sudo delegation to run commands as that account, causing ownership of / to change and resulting in severe denial of service (SSH, sudo, and package-manager failures). The change does not grant write access to / (which ships with restrictive 0555 permissions on RHEL), so the impact is availability loss rather than further privilege escalation.

Record
UBUNTU-CVE-2026-15779
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2026:21475-1 No score

Security update for samba

This update for samba fixes the following issues:

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
openSUSE-SU-2026:21475-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21540-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
openSUSE-SU-2026:21540-1
Updated
2026-11-02
OSVSUSE-SU-2026:22977-1 No score

Security update for samba

This update for samba fixes the following issues:

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:22977-1
Updated
2026-11-02
OSVSUSE-SU-2026:23003-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23003-1
Updated
2026-11-02
OSVSUSE-SU-2026:23129-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23129-1
Updated
2026-11-02
OSVSUSE-SU-2026:23152-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23152-1
Updated
2026-11-02
OSVSUSE-SU-2026:3362-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3362-1
Updated
2026-11-02
OSVSUSE-SU-2026:3363-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3363-1
Updated
2026-11-02
OSVSUSE-SU-2026:3364-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3364-1
Updated
2026-11-02
OSVSUSE-SU-2026:3365-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3365-1
Updated
2026-11-02
OSVSUSE-SU-2026:3366-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3366-1
Updated
2026-11-02
OSVSUSE-SU-2026:3367-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3367-1
Updated
2026-11-02
OSVUSN-8621-1 No score

samba vulnerabilities

It was discovered that Samba's pam_winbind incorrectly handled home directory ownership when mkhomedir was enabled. A local attacker could possibly use this issue to cause a denial of service by triggering a change in ownership of the root directory. (CVE-2026-15779)

Arjun Basnet, Douglas Bagnall, and Andrew Tridgell discovered that Samba incorrectly handled TSIG packets with name compression. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2026-6949)

Tristan Madani discovered that Samba incorrectly handled malformed ASN.1 kpasswd packets. An authenticated user could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2026-58216)

Andrew Tridgell and Tristan Madani discovered that Samba incorrectly handled TKEY name registration. A remote attacker could possibly use this issue to exhaust the TKEY name cache, resulting in a denial of service. (CVE-2026-58218)

It was discovered that Samba incorrectly handled internal LDB special directory names when processing authenticated LDAP requests. An authenticated user could possibly use this issue to perform unauthorized modifications and gain control of a domain. (CVE-2026-58221)

Andrew Tridgell and Tristan Madani discovered that Samba incorrectly handled LDAP Compare requests. An authenticated user could possibly use this issue to obtain sensitive information. (CVE-2026-58222)

Tristan Madani, Andrew Tridgell, and Martin Schwenke discovered that the CTDB protocol in Samba had insufficient bounds checking. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2026-58224)

Record
USN-8621-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Debian:12
 All versions, plus listed versions
2:4.17.10+dfsg-0+deb12u12:4.17.10+dfsg-0+deb12u1~bpo11+12:4.17.11+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u1~bpo11+1
Show 45 moreShow less
2:4.17.12+dfsg-0+deb12u22:4.17.12+dfsg-0+deb12u32:4.17.12+dfsg-0+deb12u42:4.17.8+dfsg-22:4.17.8+dfsg-2.12:4.17.9+dfsg-0+deb12u12:4.17.9+dfsg-0+deb12u22:4.17.9+dfsg-0+deb12u32:4.17.9+dfsg-0+deb12u3~bpo11+12:4.18.0+dfsg-1~exp12:4.18.0~rc1+dfsg-1exp2:4.18.0~rc2+dfsg-12:4.18.0~rc3+dfsg-12:4.18.0~rc4+dfsg-12:4.18.1+dfsg-1~exp12:4.18.2+dfsg-12:4.18.3+dfsg-12:4.18.3+dfsg-22:4.18.3+dfsg-32:4.18.4+dfsg-12:4.18.4+dfsg-22:4.18.4+dfsg-2~bpo12+12:4.18.5+dfsg-12:4.18.5+dfsg-22:4.18.5+dfsg-2~bpo12+12:4.18.6+dfsg-12:4.18.6+dfsg-1~bpo12+12:4.18.8+dfsg-1~bpo12+12:4.19.0+dfsg-12:4.19.0~rc1+dfsg-12:4.19.0~rc1+dfsg-22:4.19.0~rc1+dfsg-32:4.19.0~rc2+dfsg-12:4.19.0~rc4+dfsg-12:4.19.0~rc4+dfsg-22:4.19.1+dfsg-12:4.19.1+dfsg-22:4.19.1+dfsg-32:4.19.1+dfsg-42:4.19.2+dfsg-12:4.19.3+dfsg-12:4.19.3+dfsg-1~bpo12+12:4.19.3+dfsg-22:4.19.4+dfsg-12:4.19.4+dfsg-2
 None known
samba
Debian:13
 All versions, plus listed versions
2:4.22.10+dfsg-0+deb13u12:4.22.10+dfsg-0+deb13u22:4.22.11+dfsg-0+deb13u12:4.22.3+dfsg-42:4.22.4+dfsg-1
Show 43 moreShow less
2:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+12:4.22.6+dfsg-0+deb13u12:4.22.6+dfsg-0+deb13u1~bpo12+12:4.22.8+dfsg-0+deb13u12:4.22.8+dfsg-0+deb13u22:4.23.0+dfsg-12:4.23.0+dfsg-22:4.23.0+dfsg-32:4.23.0~rc1+dfsg-12:4.23.0~rc2+dfsg-12:4.23.0~rc3+dfsg-12:4.23.1+dfsg-12:4.23.2+dfsg-12:4.23.3+dfsg-12:4.23.3+dfsg-1~bpo13+12:4.23.4+dfsg-12:4.23.4+dfsg-1~bpo13+12:4.23.5+dfsg-12:4.23.5+dfsg-1~bpo13+12:4.23.6+dfsg-12:4.23.6+dfsg-22:4.23.6+dfsg-2~bpo13+12:4.24.0+dfsg-12:4.24.0~rc1+dfsg-12:4.24.0~rc1+dfsg-22:4.24.0~rc1+dfsg-32:4.24.0~rc2+dfsg-12:4.24.1+dfsg-12:4.24.2+dfsg-12:4.24.2+dfsg-1~bpo13+12:4.24.3+dfsg-12:4.24.3+dfsg-1~bpo13+12:4.24.4+dfsg-12:4.24.4+dfsg-1~bpo13+12:4.24.5+dfsg-12:4.24.5+dfsg-1~bpo13+12:4.24.6+dfsg-12:4.24.7+dfsg-12:4.24.7+dfsg-1~bpo13+12:4.25.0+dfsg-12:4.25.0~rc1+dfsg-12:4.25.1+dfsg-1
 None known
samba
Debian:14
 All versions, plus listed versions
2:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+12:4.23.0+dfsg-1
Show 36 moreShow less
2:4.23.0+dfsg-22:4.23.0+dfsg-32:4.23.0~rc1+dfsg-12:4.23.0~rc2+dfsg-12:4.23.0~rc3+dfsg-12:4.23.1+dfsg-12:4.23.2+dfsg-12:4.23.3+dfsg-12:4.23.3+dfsg-1~bpo13+12:4.23.4+dfsg-12:4.23.4+dfsg-1~bpo13+12:4.23.5+dfsg-12:4.23.5+dfsg-1~bpo13+12:4.23.6+dfsg-12:4.23.6+dfsg-22:4.23.6+dfsg-2~bpo13+12:4.24.0+dfsg-12:4.24.0~rc1+dfsg-12:4.24.0~rc1+dfsg-22:4.24.0~rc1+dfsg-32:4.24.0~rc2+dfsg-12:4.24.1+dfsg-12:4.24.2+dfsg-12:4.24.2+dfsg-1~bpo13+12:4.24.3+dfsg-12:4.24.3+dfsg-1~bpo13+12:4.24.4+dfsg-12:4.24.4+dfsg-1~bpo13+12:4.24.5+dfsg-12:4.24.5+dfsg-1~bpo13+12:4.24.6+dfsg-12:4.24.7+dfsg-12:4.24.7+dfsg-1~bpo13+12:4.25.0+dfsg-12:4.25.0~rc1+dfsg-12:4.25.1+dfsg-1
 None known
samba
openEuler:20.03-LTS-SP4
 before 4.11.12-40.oe2003sp4
4.11.12-40.oe2003sp4
samba
openEuler:22.03-LTS-SP4
 before 4.17.5-18.oe2203sp4
4.17.5-18.oe2203sp4
samba
openEuler:24.03-LTS-SP1
 before 4.19.3-11.oe2403sp1
4.19.3-11.oe2403sp1
samba
openEuler:24.03-LTS-SP3
 before 4.19.3-11.oe2403sp3
4.19.3-11.oe2403sp3
samba
openEuler:24.03-LTS-SP4
 before 4.19.3-11.oe2403sp4
4.19.3-11.oe2403sp4
samba
SUSE:Linux Micro 6.2
From an advisory covering 7 CVEs
 before 4.22.9+git.538.af6cb4fb2e-160000.1.1
4.22.9+git.538.af6cb4fb2e-160000.1.1
samba
SUSE:Linux Micro 6.2
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
Show 33 moreShow less
Affected packages
PackageAffectedFixed
samba
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 7 CVEs
 before 4.21.10+git.533.31d7e5508d-150700.3.29.1
4.21.10+git.533.31d7e5508d-150700.3.29.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 7 CVEs
 before 4.21.10+git.533.31d7e5508d-150700.3.29.1
4.21.10+git.533.31d7e5508d-150700.3.29.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Enterprise Storage 7.1
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150300.3.106.1
4.15.13+git.808.eeca19f5e1-150300.3.106.1
samba
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3
Show 45 moreShow less
2:4.1.3+dfsg-2ubuntu42:4.1.3+dfsg-2ubuntu52:4.1.6+dfsg-1ubuntu12:4.1.6+dfsg-1ubuntu22:4.1.6+dfsg-1ubuntu2.14.04.12:4.1.6+dfsg-1ubuntu2.14.04.22:4.1.6+dfsg-1ubuntu2.14.04.32:4.1.6+dfsg-1ubuntu2.14.04.42:4.1.6+dfsg-1ubuntu2.14.04.52:4.1.6+dfsg-1ubuntu2.14.04.72:4.1.6+dfsg-1ubuntu2.14.04.82:4.1.6+dfsg-1ubuntu2.14.04.92:4.1.6+dfsg-1ubuntu2.14.04.112:4.1.6+dfsg-1ubuntu2.14.04.122:4.1.6+dfsg-1ubuntu2.14.04.132:4.3.8+dfsg-0ubuntu0.14.04.22:4.3.9+dfsg-0ubuntu0.14.04.12:4.3.9+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.12:4.3.11+dfsg-0ubuntu0.14.04.22:4.3.11+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.42:4.3.11+dfsg-0ubuntu0.14.04.62:4.3.11+dfsg-0ubuntu0.14.04.72:4.3.11+dfsg-0ubuntu0.14.04.82:4.3.11+dfsg-0ubuntu0.14.04.92:4.3.11+dfsg-0ubuntu0.14.04.102:4.3.11+dfsg-0ubuntu0.14.04.112:4.3.11+dfsg-0ubuntu0.14.04.122:4.3.11+dfsg-0ubuntu0.14.04.132:4.3.11+dfsg-0ubuntu0.14.04.142:4.3.11+dfsg-0ubuntu0.14.04.162:4.3.11+dfsg-0ubuntu0.14.04.172:4.3.11+dfsg-0ubuntu0.14.04.192:4.3.11+dfsg-0ubuntu0.14.04.202:4.3.11+dfsg-0ubuntu0.14.04.20+esm12:4.3.11+dfsg-0ubuntu0.14.04.20+esm22:4.3.11+dfsg-0ubuntu0.14.04.20+esm32:4.3.11+dfsg-0ubuntu0.14.04.20+esm42:4.3.11+dfsg-0ubuntu0.14.04.20+esm62:4.3.11+dfsg-0ubuntu0.14.04.20+esm72:4.3.11+dfsg-0ubuntu0.14.04.20+esm82:4.3.11+dfsg-0ubuntu0.14.04.20+esm92:4.3.11+dfsg-0ubuntu0.14.04.20+esm112:4.3.11+dfsg-0ubuntu0.14.04.20+esm12
 None known
samba
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:4.1.17+dfsg-4ubuntu22:4.1.20+dfsg-1ubuntu12:4.1.20+dfsg-1ubuntu22:4.1.20+dfsg-1ubuntu32:4.1.20+dfsg-1ubuntu5
Show 41 moreShow less
2:4.3.3+dfsg-1ubuntu12:4.3.3+dfsg-1ubuntu22:4.3.3+dfsg-1ubuntu32:4.3.6+dfsg-1ubuntu12:4.3.8+dfsg-0ubuntu12:4.3.9+dfsg-0ubuntu0.16.04.12:4.3.9+dfsg-0ubuntu0.16.04.22:4.3.9+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.12:4.3.11+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.52:4.3.11+dfsg-0ubuntu0.16.04.62:4.3.11+dfsg-0ubuntu0.16.04.72:4.3.11+dfsg-0ubuntu0.16.04.82:4.3.11+dfsg-0ubuntu0.16.04.92:4.3.11+dfsg-0ubuntu0.16.04.102:4.3.11+dfsg-0ubuntu0.16.04.112:4.3.11+dfsg-0ubuntu0.16.04.122:4.3.11+dfsg-0ubuntu0.16.04.132:4.3.11+dfsg-0ubuntu0.16.04.152:4.3.11+dfsg-0ubuntu0.16.04.162:4.3.11+dfsg-0ubuntu0.16.04.172:4.3.11+dfsg-0ubuntu0.16.04.182:4.3.11+dfsg-0ubuntu0.16.04.192:4.3.11+dfsg-0ubuntu0.16.04.202:4.3.11+dfsg-0ubuntu0.16.04.212:4.3.11+dfsg-0ubuntu0.16.04.232:4.3.11+dfsg-0ubuntu0.16.04.242:4.3.11+dfsg-0ubuntu0.16.04.252:4.3.11+dfsg-0ubuntu0.16.04.262:4.3.11+dfsg-0ubuntu0.16.04.272:4.3.11+dfsg-0ubuntu0.16.04.282:4.3.11+dfsg-0ubuntu0.16.04.292:4.3.11+dfsg-0ubuntu0.16.04.302:4.3.11+dfsg-0ubuntu0.16.04.312:4.3.11+dfsg-0ubuntu0.16.04.322:4.3.11+dfsg-0ubuntu0.16.04.342:4.3.11+dfsg-0ubuntu0.16.04.34+esm12:4.3.11+dfsg-0ubuntu0.16.04.34+esm22:4.3.11+dfsg-0ubuntu0.16.04.34+esm32:4.3.11+dfsg-0ubuntu0.16.04.34+esm4
 None known
samba
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:4.6.7+dfsg-1ubuntu32:4.7.1+dfsg-1ubuntu12:4.7.3+dfsg-1ubuntu12:4.7.4+dfsg-1ubuntu12:4.7.6+dfsg~ubuntu-0ubuntu1
Show 27 moreShow less
2:4.7.6+dfsg~ubuntu-0ubuntu22:4.7.6+dfsg~ubuntu-0ubuntu2.22:4.7.6+dfsg~ubuntu-0ubuntu2.42:4.7.6+dfsg~ubuntu-0ubuntu2.52:4.7.6+dfsg~ubuntu-0ubuntu2.62:4.7.6+dfsg~ubuntu-0ubuntu2.72:4.7.6+dfsg~ubuntu-0ubuntu2.92:4.7.6+dfsg~ubuntu-0ubuntu2.102:4.7.6+dfsg~ubuntu-0ubuntu2.112:4.7.6+dfsg~ubuntu-0ubuntu2.132:4.7.6+dfsg~ubuntu-0ubuntu2.142:4.7.6+dfsg~ubuntu-0ubuntu2.152:4.7.6+dfsg~ubuntu-0ubuntu2.162:4.7.6+dfsg~ubuntu-0ubuntu2.172:4.7.6+dfsg~ubuntu-0ubuntu2.182:4.7.6+dfsg~ubuntu-0ubuntu2.192:4.7.6+dfsg~ubuntu-0ubuntu2.202:4.7.6+dfsg~ubuntu-0ubuntu2.212:4.7.6+dfsg~ubuntu-0ubuntu2.232:4.7.6+dfsg~ubuntu-0ubuntu2.242:4.7.6+dfsg~ubuntu-0ubuntu2.262:4.7.6+dfsg~ubuntu-0ubuntu2.272:4.7.6+dfsg~ubuntu-0ubuntu2.282:4.7.6+dfsg~ubuntu-0ubuntu2.292:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm12:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm22:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
 None known
samba
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4
Show 32 moreShow less
2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.12:4.15.13+dfsg-0ubuntu0.20.04.22:4.15.13+dfsg-0ubuntu0.20.04.32:4.15.13+dfsg-0ubuntu0.20.04.42:4.15.13+dfsg-0ubuntu0.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.62:4.15.13+dfsg-0ubuntu0.20.04.72:4.15.13+dfsg-0ubuntu0.20.04.82:4.15.13+dfsg-0ubuntu0.20.04.8+esm12:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
 None known
samba
Ubuntu:22.04:LTS
 before 2:4.15.13+dfsg-0ubuntu1.13, plus listed versions
2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1
Show 18 moreShow less
2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu12:4.15.13+dfsg-0ubuntu1.12:4.15.13+dfsg-0ubuntu1.22:4.15.13+dfsg-0ubuntu1.32:4.15.13+dfsg-0ubuntu1.42:4.15.13+dfsg-0ubuntu1.52:4.15.13+dfsg-0ubuntu1.62:4.15.13+dfsg-0ubuntu1.72:4.15.13+dfsg-0ubuntu1.82:4.15.13+dfsg-0ubuntu1.92:4.15.13+dfsg-0ubuntu1.102:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13
samba
Ubuntu:24.04:LTS
 before 2:4.19.5+dfsg-4ubuntu9.7, plus listed versions
2:4.18.6+dfsg-1ubuntu22:4.18.6+dfsg-1ubuntu2.12:4.18.6+dfsg-1ubuntu2.22:4.19.4+dfsg-3ubuntu12:4.19.5+dfsg-1ubuntu1
Show 7 moreShow less
2:4.19.5+dfsg-4ubuntu72:4.19.5+dfsg-4ubuntu82:4.19.5+dfsg-4ubuntu92:4.19.5+dfsg-4ubuntu9.22:4.19.5+dfsg-4ubuntu9.32:4.19.5+dfsg-4ubuntu9.42:4.19.5+dfsg-4ubuntu9.6
2:4.19.5+dfsg-4ubuntu9.7
samba
Ubuntu:26.04:LTS
 before 2:4.23.6+dfsg-1ubuntu2.2, plus listed versions
2:4.22.3+dfsg-4ubuntu22:4.22.3+dfsg-4ubuntu2.12:4.22.3+dfsg-4ubuntu32:4.22.3+dfsg-4ubuntu42:4.23.4+dfsg-1ubuntu1
Show 4 moreShow less
2:4.23.5+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu12:4.23.6+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu2.1
2:4.23.6+dfsg-1ubuntu2.2
samba
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 4.22.9+git.538.af6cb4fb2e-160000.1.1
4.22.9+git.538.af6cb4fb2e-160000.1.1
samba
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1

History

History
RecordedChangedSources
affectedOSV
affectedEUVD, NVD
factsCVE List
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-15779 is a medium vulnerability (CVSS 6.1) in Red Hat Enterprise Linux 10, published July 15, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 1st percentile. Fixed in samba 4.11.12-40.oe2003sp4.

References

Show 53 moreShow less
This page doesn't list everything

Left out here: 132 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open