{"id":"CVE-2025-9640","aliases":["ALPINE-CVE-2025-9640","AZL-68817","AZL-68936","DEBIAN-CVE-2025-9640","DLA-4384-1","EUVD-2025-34611","GHSA-w497-wqwx-v847","MGASA-2026-0142","OESA-2025-2509","OESA-2025-2510","OESA-2025-2511","OESA-2025-2512","OESA-2025-2513","OESA-2025-2539","SUSE-SU-2025:03603-1","SUSE-SU-2025:03604-1","SUSE-SU-2025:03612-1","SUSE-SU-2025:03618-1","SUSE-SU-2025:21005-1","SUSE-SU-2025:21026-1","SUSE-SU-2025:3676-1","SUSE-SU-2025:3677-1","UBUNTU-CVE-2025-9640","USN-7826-1","USN-7826-2","openSUSE-SU-2025:15649-1","openSUSE-SU-2025:20048-1"],"status":"published","title":"Samba: vfs_streams_xattr uninitialized memory write possible","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00473,"percentile":0.41153,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-908"],"published":"2025-10-15T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"samba","fixed_in":["4.21.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"samba","fixed_in":["4.21.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"samba","fixed_in":["4.21.9-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.17.12+dfsg-0+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.22.6+dfsg-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.23.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"samba","fixed_in":["2:4.13.13+dfsg-1~deb11u7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"samba","fixed_in":["2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"samba","fixed_in":["2:4.15.13+dfsg-0ubuntu1.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"samba","fixed_in":["2:4.19.5+dfsg-4ubuntu9.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"samba","fixed_in":["2:4.22.3+dfsg-4ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.9-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.18.3-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.17.12+dfsg-0+deb12u3"}]}],"versions":["2:4.17.10+dfsg-0+deb12u1","2:4.17.10+dfsg-0+deb12u1~bpo11+1","2:4.17.11+dfsg-0+deb12u1","2:4.17.12+dfsg-0+deb12u1","2:4.17.12+dfsg-0+deb12u1~bpo11+1","2:4.17.12+dfsg-0+deb12u2","2:4.17.8+dfsg-2","2:4.17.8+dfsg-2.1","2:4.17.9+dfsg-0+deb12u1","2:4.17.9+dfsg-0+deb12u2","2:4.17.9+dfsg-0+deb12u3","2:4.17.9+dfsg-0+deb12u3~bpo11+1"]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.22.6+dfsg-0+deb13u1"}]}],"versions":["2:4.22.3+dfsg-4","2:4.22.4+dfsg-1","2:4.22.4+dfsg-1~deb13u1","2:4.22.4+dfsg-1~deb13u1~bpo12+1","2:4.22.6+dfsg-0+deb13u1~bpo12+1"]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.23.2+dfsg-1"}]}],"versions":["2:4.22.3+dfsg-4","2:4.22.4+dfsg-1","2:4.22.4+dfsg-1~deb13u1","2:4.22.4+dfsg-1~deb13u1~bpo12+1","2:4.23.0+dfsg-1","2:4.23.0+dfsg-2","2:4.23.0+dfsg-3","2:4.23.0~rc1+dfsg-1","2:4.23.0~rc2+dfsg-1","2:4.23.0~rc3+dfsg-1","2:4.23.1+dfsg-1"]},{"source":"osv","ecosystem":"Debian:11","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.13+dfsg-1~deb11u7"}]}],"versions":["2:4.13.13+dfsg-1~deb11u1","2:4.13.13+dfsg-1~deb11u2","2:4.13.13+dfsg-1~deb11u3","2:4.13.13+dfsg-1~deb11u4","2:4.13.13+dfsg-1~deb11u5","2:4.13.13+dfsg-1~deb11u6","2:4.13.5+dfsg-2"]},{"source":"osv","ecosystem":"Mageia:9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12-1.2.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.5-14.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.3-8.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.3-8.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-37.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.5-14.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.3-8.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.510.0efaadf376b-150500.3.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.510.0efaadf376b-150500.3.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.510.0efaadf376b-150500.3.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.510.0efaadf376b-150500.3.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.510.0efaadf376b-150500.3.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12+git.510.0efaadf376b-150500.3.34.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.664.e8416d8d213-3.99.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.664.e8416d8d213-3.99.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.664.e8416d8d213-3.99.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.8+git.435.78ced6cf30d-150600.3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.8+git.435.78ced6cf30d-150600.3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.8+git.435.78ced6cf30d-150600.3.21.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150400.3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150400.3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150400.3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150400.3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150400.3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150400.3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150400.3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy LTS 4.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150400.3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server LTS 4.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150400.3.40.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.5+git.431.dc5a539f124-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.5+git.431.dc5a539f124-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.5+git.431.dc5a539f124-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.8+git.418.e80c9b2a88c-150700.3.11.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.8+git.418.e80c9b2a88c-150700.3.11.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150300.3.96.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150300.3.96.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150300.3.96.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150300.3.96.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150300.3.96.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.736.b791be993ba-150300.3.96.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.1","2:4.15.13+dfsg-0ubuntu0.20.04.2","2:4.15.13+dfsg-0ubuntu0.20.04.3","2:4.15.13+dfsg-0ubuntu0.20.04.4","2:4.15.13+dfsg-0ubuntu0.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.6","2:4.15.13+dfsg-0ubuntu0.20.04.7","2:4.15.13+dfsg-0ubuntu0.20.04.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1.10"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3","2:4.15.13+dfsg-0ubuntu1","2:4.15.13+dfsg-0ubuntu1.1","2:4.15.13+dfsg-0ubuntu1.2","2:4.15.13+dfsg-0ubuntu1.3","2:4.15.13+dfsg-0ubuntu1.4","2:4.15.13+dfsg-0ubuntu1.5","2:4.15.13+dfsg-0ubuntu1.6","2:4.15.13+dfsg-0ubuntu1.7","2:4.15.13+dfsg-0ubuntu1.8","2:4.15.13+dfsg-0ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.19.5+dfsg-4ubuntu9.4"}]}],"versions":["2:4.18.6+dfsg-1ubuntu2","2:4.18.6+dfsg-1ubuntu2.1","2:4.18.6+dfsg-1ubuntu2.2","2:4.19.4+dfsg-3ubuntu1","2:4.19.5+dfsg-1ubuntu1","2:4.19.5+dfsg-4ubuntu7","2:4.19.5+dfsg-4ubuntu8","2:4.19.5+dfsg-4ubuntu9","2:4.19.5+dfsg-4ubuntu9.2","2:4.19.5+dfsg-4ubuntu9.3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.22.3+dfsg-4ubuntu2.1"}]}],"versions":["2:4.21.4+dfsg-1ubuntu3","2:4.21.4+dfsg-1ubuntu4","2:4.21.4+dfsg-1ubuntu5","2:4.22.2+dfsg-1ubuntu1","2:4.22.3+dfsg-4ubuntu1","2:4.22.3+dfsg-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1.10"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3","2:4.15.13+dfsg-0ubuntu1","2:4.15.13+dfsg-0ubuntu1.1","2:4.15.13+dfsg-0ubuntu1.2","2:4.15.13+dfsg-0ubuntu1.3","2:4.15.13+dfsg-0ubuntu1.4","2:4.15.13+dfsg-0ubuntu1.5","2:4.15.13+dfsg-0ubuntu1.6","2:4.15.13+dfsg-0ubuntu1.7","2:4.15.13+dfsg-0ubuntu1.8","2:4.15.13+dfsg-0ubuntu1.9"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.19.5+dfsg-4ubuntu9.4"}]}],"versions":["2:4.18.6+dfsg-1ubuntu2","2:4.18.6+dfsg-1ubuntu2.1","2:4.18.6+dfsg-1ubuntu2.2","2:4.19.4+dfsg-3ubuntu1","2:4.19.5+dfsg-1ubuntu1","2:4.19.5+dfsg-4ubuntu7","2:4.19.5+dfsg-4ubuntu8","2:4.19.5+dfsg-4ubuntu9","2:4.19.5+dfsg-4ubuntu9.2","2:4.19.5+dfsg-4ubuntu9.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.22.3+dfsg-4ubuntu2.1"}]}],"versions":["2:4.21.4+dfsg-1ubuntu3","2:4.21.4+dfsg-1ubuntu4","2:4.21.4+dfsg-1ubuntu5","2:4.22.2+dfsg-1ubuntu1","2:4.22.3+dfsg-4ubuntu1","2:4.22.3+dfsg-4ubuntu2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.1","2:4.15.13+dfsg-0ubuntu0.20.04.2","2:4.15.13+dfsg-0ubuntu0.20.04.3","2:4.15.13+dfsg-0ubuntu0.20.04.4","2:4.15.13+dfsg-0ubuntu0.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.6","2:4.15.13+dfsg-0ubuntu0.20.04.7","2:4.15.13+dfsg-0ubuntu0.20.04.8"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.5+git.431.dc5a539f124-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.5+git.431.dc5a539f124-160000.1.1"}]}],"bundled":2}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat openshift container platform 4"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2025-9640","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2391698","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://www.samba.org/samba/history/security.html"},{"url":"http://www.openwall.com/lists/oss-security/2025/10/15/2"},{"url":"http://www.openwall.com/lists/oss-security/2025/10/16/2"},{"url":"https://lists.debian.org/debian-lts-announce/2025/11/msg00027.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9640","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-w497-wqwx-v847"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-9640","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-9640","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0142.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34672","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/10/15/2","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2509","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10230","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2510","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2511","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2512","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2513","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2539","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503603-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1251279","tags":["report"]},{"url":"https://bugzilla.suse.com/1251280","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10230","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-9640","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503604-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503612-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503618-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521005-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1249087","tags":["report"]},{"url":"https://bugzilla.suse.com/1249179","tags":["report"]},{"url":"https://bugzilla.suse.com/1249180","tags":["report"]},{"url":"https://bugzilla.suse.com/1249181","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521026-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253676-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20253677-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-9640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9640","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7826-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7826-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-10230","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-9640","title":"Samba: vfs_streams_xattr uninitialized memory write possible","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","status":"published","published":"2025-10-15T12:47:29.871Z","modified":"2026-11-06T17:47:22.831Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-908","CWE-908"],"updated_at":"2026-11-06T18:59:07.714367Z"}],"euvd":[{"id":"EUVD-2025-34611","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","status":"published","published":"2025-10-15T12:47:29Z","modified":"2026-11-06T17:47:22Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-06T19:05:53.354277Z"}],"ghsa":[{"id":"GHSA-w497-wqwx-v847","title":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could...","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","status":"published","published":"2025-10-15T15:30:27Z","modified":"2025-11-26T21:32:32Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T15:04:58.596385Z"}],"nvd":[{"id":"CVE-2025-9640","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","status":"published","published":"2025-10-15T13:16:01.997Z","modified":"2026-11-06T18:17:29.78Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-908"],"updated_at":"2026-11-06T20:01:10.453281Z"}],"osv":[{"id":"ALPINE-CVE-2025-9640","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","status":"published","published":"2025-10-15T13:16:01.997Z","modified":"2026-08-27T22:18:03.073169629Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:50.269992Z"},{"id":"DEBIAN-CVE-2025-9640","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","status":"published","published":"2025-10-15T13:16:01.997Z","modified":"2026-11-07T09:47:37.284659795Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-07T10:14:19.880839Z"},{"id":"OESA-2025-2509","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in Samba (File Transfer Software) (the affected version is unknown) and classified as critical.The CWE definition for the vulnerability is CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.As an impact it is known to affect confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10230)\n\nA flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.(CVE-2025-9640)","status":"published","published":"2025-10-24T11:09:36Z","modified":"2026-08-18T01:19:15.872382061Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2510","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in Samba (File Transfer Software) (the affected version is unknown) and classified as critical.The CWE definition for the vulnerability is CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.As an impact it is known to affect confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10230)\n\nA flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.(CVE-2025-9640)","status":"published","published":"2025-10-24T11:09:36Z","modified":"2026-08-18T01:19:15.569235986Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2511","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in Samba (File Transfer Software) (the affected version is unknown) and classified as critical.The CWE definition for the vulnerability is CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.As an impact it is known to affect confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10230)\n\nA flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.(CVE-2025-9640)","status":"published","published":"2025-10-24T11:09:36Z","modified":"2026-08-18T01:19:16.013228709Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2512","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in Samba (File Transfer Software) (the affected version is unknown) and classified as critical.The CWE definition for the vulnerability is CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.As an impact it is known to affect confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10230)\n\nA flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.(CVE-2025-9640)","status":"published","published":"2025-10-24T11:09:36Z","modified":"2026-08-18T01:19:16.100110184Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2513","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in Samba (File Transfer Software) (the affected version is unknown) and classified as critical.The CWE definition for the vulnerability is CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.As an impact it is known to affect confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10230)\n\nA flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.(CVE-2025-9640)","status":"published","published":"2025-10-24T11:09:36Z","modified":"2026-08-18T01:19:16.089433453Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2539","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nA vulnerability has been found in Samba (File Transfer Software) (the affected version is unknown) and classified as critical.The CWE definition for the vulnerability is CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.As an impact it is known to affect confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10230)\n\nA flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.(CVE-2025-9640)","status":"published","published":"2025-10-31T11:09:37Z","modified":"2026-08-18T01:19:16.176755519Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"UBUNTU-CVE-2025-9640","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","status":"published","published":"2025-10-15T00:00:00Z","modified":"2026-04-22T16:16:20.166692Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:55.926217Z"},{"id":"AZL-68817","title":"CVE-2025-9640 affecting package samba 4.12.5-7","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","status":"published","published":"2025-10-15T13:16:01Z","modified":"2026-04-21T04:38:30.411014Z","updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"AZL-68936","title":"CVE-2025-9640 affecting package samba 4.18.3-2","description":"A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.","status":"published","published":"2025-10-15T13:16:01Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:23.994498Z"},{"id":"DLA-4384-1","title":"samba - security update","status":"published","published":"2025-11-26T00:00:00Z","modified":"2025-11-26T20:18:12.019249Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2026-0142","title":"Updated samba packages fix security vulnerabilities","description":"An information leak vulnerability was discovered in Samba's LDAP server.\nDue to missing access control checks, an authenticated but unprivileged\nattacker could discover the names and preserved attributes of deleted\nobjects in the LDAP store. (CVE-2018-14628)\nCommand injection in wins server hook script. (CVE-2025-10230)\nvfs_streams_xattr uninitialized memory write possible. (CVE-2025-9640)\n","status":"published","published":"2026-05-16T00:52:55Z","modified":"2026-05-16T01:00:06.741183Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15649-1","title":"ctdb-4.22.5+git.431.dc5a539f124-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.22.5+git.431.dc5a539f124-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-18T00:00:00Z","modified":"2026-03-23T04:54:03.274268Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20048-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nUpdate to 4.22.5:\n\n  * CVE-2025-10230: Command injection via WINS server hook script (bsc#1251280).\n  * CVE-2025-9640: uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).\n\n- Relax samba-gpupdate requirement for cepces, certmonger, and sscep\n  to a recommends. They are only required if utilizing certificate\n  auto enrollment (bsc#1249087).\n\n- Disable timeouts for smb.service so that possibly slow running\n  ExecStartPre script 'update-samba-security-profile' doesn't\n  cause service start to fail due to timeouts (bsc#1249181).\n\n- Ensure semanage is pulled in as a requirement when samba in\n  installed when selinux security access mechanism that is used\n  (bsc#1249180).\n\n- don't attempt to label paths that don't exist, also remove\n  unecessary evaluation of semange \u0026 restorecon cmds (bsc#1249179).\n\nUpdate to 4.22.4:\n\n  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with\n    SysvolReady=0\n  * getpwuid does not shift to new DC when current DC is down\n  * Windows security hardening locks out schannel'ed netlogon dc\n    calls like netr_DsRGetDCName-\n  * Unresponsive second DC can cause idmapping failure when using\n    idmap_ad-\n  * kinit command is failing with Missing cache Error.\n  * Figuring out the DC name from IP address fails and breaks\n    fork_domain_child().\n  * vfs_streams_depot fstatat broken.\n  * Delayed leader broadcast can block ctdb forever.\n  * Apparently there is a conflict between shadow_copy2 module\n    and virusfilter (action quarantine).\n  * Fix handling of empty GPO link.\n  * SMB ACL inheritance doesn't work for files created.\n\n- adjust gpgme build dependency for future-proofing\n\n","status":"published","published":"2025-11-18T23:14:26Z","modified":"2026-03-23T04:54:15.983729Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"SUSE-SU-2025:03603-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).\n- CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).\n","status":"published","published":"2025-10-15T13:37:44Z","modified":"2026-03-23T04:50:37.236223Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:03604-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).\n- CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).\n","status":"published","published":"2025-10-15T13:37:54Z","modified":"2026-03-23T04:48:06.052665Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:03612-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).\n- CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).\n","status":"published","published":"2025-10-16T04:04:19Z","modified":"2026-02-04T02:44:26.936171Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:03618-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).\n- CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).\n","status":"published","published":"2025-10-16T07:37:32Z","modified":"2026-02-04T04:32:51.596035Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2025:21005-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nUpdate to 4.22.5:\n\n  * CVE-2025-10230: Command injection via WINS server hook script (bsc#1251280).\n  * CVE-2025-9640: uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).\n\n- Relax samba-gpupdate requirement for cepces, certmonger, and sscep\n  to a recommends. They are only required if utilizing certificate\n  auto enrollment (bsc#1249087).\n\n- Disable timeouts for smb.service so that possibly slow running\n  ExecStartPre script 'update-samba-security-profile' doesn't\n  cause service start to fail due to timeouts (bsc#1249181).\n\n- Ensure semanage is pulled in as a requirement when samba in\n  installed when selinux security access mechanism that is used\n  (bsc#1249180).\n\n- don't attempt to label paths that don't exist, also remove\n  unecessary evaluation of semange \u0026 restorecon cmds (bsc#1249179).\n\nUpdate to 4.22.4:\n\n  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with\n    SysvolReady=0\n  * getpwuid does not shift to new DC when current DC is down\n  * Windows security hardening locks out schannel'ed netlogon dc\n    calls like netr_DsRGetDCName-\n  * Unresponsive second DC can cause idmapping failure when using\n    idmap_ad-\n  * kinit command is failing with Missing cache Error.\n  * Figuring out the DC name from IP address fails and breaks\n    fork_domain_child().\n  * vfs_streams_depot fstatat broken.\n  * Delayed leader broadcast can block ctdb forever.\n  * Apparently there is a conflict between shadow_copy2 module\n    and virusfilter (action quarantine).\n  * Fix handling of empty GPO link.\n  * SMB ACL inheritance doesn't work for files created.\n\n- adjust gpgme build dependency for future-proofing\n\n","status":"published","published":"2025-11-18T22:57:17Z","modified":"2026-03-23T04:49:13.528187Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:21026-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nUpdate to 4.22.5:\n\n  * CVE-2025-10230: Command injection via WINS server hook script (bsc#1251280).\n  * CVE-2025-9640: uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).\n\n- Relax samba-gpupdate requirement for cepces, certmonger, and sscep\n  to a recommends. They are only required if utilizing certificate\n  auto enrollment (bsc#1249087).\n\n- Disable timeouts for smb.service so that possibly slow running\n  ExecStartPre script 'update-samba-security-profile' doesn't\n  cause service start to fail due to timeouts (bsc#1249181).\n\n- Ensure semanage is pulled in as a requirement when samba in\n  installed when selinux security access mechanism that is used\n  (bsc#1249180).\n\n- don't attempt to label paths that don't exist, also remove\n  unecessary evaluation of semange \u0026 restorecon cmds (bsc#1249179).\n\nUpdate to 4.22.4:\n\n  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with\n    SysvolReady=0\n  * getpwuid does not shift to new DC when current DC is down\n  * Windows security hardening locks out schannel'ed netlogon dc\n    calls like netr_DsRGetDCName-\n  * Unresponsive second DC can cause idmapping failure when using\n    idmap_ad-\n  * kinit command is failing with Missing cache Error.\n  * Figuring out the DC name from IP address fails and breaks\n    fork_domain_child().\n  * vfs_streams_depot fstatat broken.\n  * Delayed leader broadcast can block ctdb forever.\n  * Apparently there is a conflict between shadow_copy2 module\n    and virusfilter (action quarantine).\n  * Fix handling of empty GPO link.\n  * SMB ACL inheritance doesn't work for files created.\n\n- adjust gpgme build dependency for future-proofing\n\n","status":"published","published":"2025-11-18T22:57:17Z","modified":"2026-03-23T04:51:08.460921Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:3676-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2025-9640: Fixed uninitialized memory disclosure via vfs_streams_xattr (bsc#1251279).\n- CVE-2025-10230: Fixed command Injection in WINS server hook script (bsc#1251280).\n\nUpdate to 4.21.8:\n\n  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with\n    SysvolReady=0; (bso#14981).\n  * getpwuid does not shift to new DC when current DC is down;\n    (bso#15844).\n  * Windows security hardening locks out schannel'ed netlogon dc\n    calls like netr_DsRGetDCName; (bso#15876).\n  * kinit command is failing with Missing cache Error;\n    (bso#15840).\n  * Figuring out the DC name from IP address fails and breaks\n    fork_domain_child(); (bso#15891).\n  * Delayed leader broadcast can block ctdb forever; (bso#15892).\n  * 'net ads group' failed to list domain groups; (bso#15900).\n  * Apparently there is a conflict between shadow_copy2 module\n    and virusfilter (action quarantine); (bso#15663).\n  * Fix handling of empty GPO link; (bso#15877).\n  * SMB ACL inheritance doesn't work for files created;\n    (bso#15880).\n","status":"published","published":"2025-10-20T08:26:22Z","modified":"2026-03-23T04:51:17.482831Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:3677-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2025-9640: Fixed vfs_streams_xattr uninitialized memory write (bsc#1251279).\n- CVE-2025-10230: Fixed command Injection in WINS Server Hook Script (bsc#1251280).\n","status":"published","published":"2025-10-20T08:34:16Z","modified":"2026-03-23T04:51:17.475571Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"USN-7826-1","title":"samba vulnerabilities","description":"Andrew Walker discovered that Samba incorrectly initialized memory in the\nvfs_streams_xattr module. An authenticated attacker could possibly use this\nissue to obtain sensitive information. (CVE-2025-9640)\n\nIgor Morgenstern discovered that Samba incorrectly handled names passed to\nthe WINS hook program. An attacker could possibly use this issue to execute\narbitrary code. (CVE-2025-10230)","status":"published","published":"2025-10-16T07:48:07Z","modified":"2026-04-22T11:02:26.861077Z","updated_at":"2026-11-02T16:58:21.91885Z"},{"id":"USN-7826-2","title":"samba vulnerabilities","description":"USN-7826-1 fixed vulnerabilities in Samba. This update provides the\ncorresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu\n18.04 LTS and Ubuntu 20.04 LTS.\n\nOriginal advisory details:\n\n Andrew Walker discovered that Samba incorrectly initialized memory in the\n vfs_streams_xattr module. An authenticated attacker could possibly use this\n issue to obtain sensitive information. (CVE-2025-9640)\n\n Igor Morgenstern discovered that Samba incorrectly handled names passed to\n the WINS hook program. An attacker could possibly use this issue to execute\n arbitrary code. (CVE-2025-10230)","status":"published","published":"2025-10-20T06:05:11Z","modified":"2026-06-25T13:32:31.217910042Z","updated_at":"2026-11-02T16:58:21.91885Z"}]}}