A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sambaUpgrade samba-gpupdateUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade python3-samba-testUpgrade libwbclient-develUpgrade libldbUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade libnetapi-develUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-usersharesUpgrade samba-vfs-iouringUpgrade samba-winexeUpgrade libldb-develUpgrade samba-dcerpcUpgrade samba-client-libsUpgrade samba-test-libsUpgrade python3-samba-dcUpgrade libwbclientUpgrade ldb-toolsUpgrade samba-develUpgrade samba-clientUpgrade samba-toolsUpgrade python3-ldbUpgrade samba-commonUpgrade python3-sambaUpgrade samba-ldb-ldap-modulesUpgrade samba-testUpgrade samba-libsUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-pidlUpgrade libnetapi | Jun 16, 2026 | Jun 10, 2026 |
| Alpine Linux | — | Upgrade samba | May 29, 2026 | May 27, 2026 |
| Debian | — | Upgrade samba | Jul 23, 2026 | Jul 23, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | May 27, 2026 |
| Redhat_linux | — | Upgrade samba-vfs-iouring-debuginfoUpgrade samba-dc-libsUpgrade samba-test-libs-debuginfoUpgrade samba-dcerpcUpgrade samba-winexeUpgrade libwbclient-develUpgrade libldb-debuginfoUpgrade samba-client-debuginfoUpgrade samba-gpupdateUpgrade samba-winbind-krb5-locatorUpgrade sambaUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libsUpgrade ctdbUpgrade samba-winbind-modulesUpgrade samba-winbind-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade python3-samba-debuginfoUpgrade samba-test-libsUpgrade libsmbclient-debuginfoUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-toolsUpgrade libnetapi-develUpgrade libsmbclientUpgrade samba-client-libs-debuginfoUpgrade libldbUpgrade python3-samba-testUpgrade libldb-develUpgrade samba-toolsUpgrade samba-test-debuginfoUpgrade python3-sambaUpgrade samba-winexe-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-pidlUpgrade python3-samba-develUpgrade samba-krb5-printing-debuginfoNo solution existsUpgrade samba-usersharesUpgrade samba-debuginfoUpgrade samba-vfs-iouringUpgrade samba-dc-libs-debuginfoUpgrade samba-krb5-printingUpgrade samba-libs-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-dcUpgrade samba-ldb-ldap-modulesUpgrade python3-ldbUpgrade samba-develUpgrade ldb-tools-debuginfoUpgrade samba-client-libsUpgrade samba-winbind-modules-debuginfoUpgrade ctdb-debuginfoUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-libs-debuginfoUpgrade python3-ldb-debuginfoUpgrade samba-testUpgrade libwbclient-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade ldb-toolsUpgrade libnetapiUpgrade samba-libs | Jun 5, 2026 | May 27, 2026 |
| Rocky_linux | — | Upgrade libnetapiUpgrade samba-usersharesUpgrade samba-vfs-iouringUpgrade samba-develUpgrade python3-ldb-debuginfoUpgrade samba-testUpgrade python3-sambaUpgrade python3-samba-dcUpgrade samba-ldb-ldap-modulesUpgrade samba-common-tools-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade sambaUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-libs-debuginfoUpgrade samba-test-debuginfoUpgrade samba-krb5-printingUpgrade samba-dcerpc-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade libwbclientUpgrade python3-samba-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade ctdb-debuginfoUpgrade ldb-toolsUpgrade libsmbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-clientUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-debugsourceUpgrade python3-ldbUpgrade ctdbUpgrade samba-dc-libs-debuginfoUpgrade libnetapi-develUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-winexeUpgrade samba-winbind-clientsUpgrade samba-dcerpcUpgrade libwbclient-debuginfoUpgrade libldb-develUpgrade python3-samba-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libwbclient-develUpgrade samba-toolsUpgrade samba-common-toolsUpgrade samba-debuginfoUpgrade ldb-tools-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-winbind-modulesUpgrade libnetapi-debuginfoUpgrade libldbUpgrade libldb-debuginfoUpgrade samba-dc-libsUpgrade python3-samba-testUpgrade samba-test-libsUpgrade samba-common-libsUpgrade samba-winbind-debuginfoUpgrade samba-test-libs-debuginfo | Jun 17, 2026 | Jun 13, 2026 |
| Suse | — | Upgrade samba-docUpgrade samba-ldb-ldapUpgrade libldb-develUpgrade samba-cephUpgrade samba-libs-python3Upgrade ctdbUpgrade samba-toolUpgrade samba-winbind-libsUpgrade samba-ad-dc-libsUpgrade samba-dcerpcUpgrade samba-gpupdateUpgrade samba-python3Upgrade samba-clientUpgrade ctdb-pcp-pmdaUpgrade samba-winbindUpgrade samba-winbind-libs-32bitUpgrade samba-client-langUpgrade python3-ldbUpgrade samba-ad-dcUpgrade libldb2-32bitUpgrade ldb-toolsUpgrade libldb2Upgrade samba-develUpgrade samba-client-libs-32bitUpgrade sambaUpgrade samba-testUpgrade samba-libs-32bitUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-dsdb-modulesUpgrade samba-winbind-libs-lang | May 27, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade samba | May 27, 2026 | May 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub