A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-develUpgrade libwbclient-develUpgrade samba-toolsUpgrade ldb-toolsUpgrade samba-test-libsUpgrade samba-pidlUpgrade samba-gpupdateUpgrade python3-samba-dcUpgrade libldbUpgrade samba-commonUpgrade samba-testUpgrade samba-vfs-iouringUpgrade libldb-develUpgrade libnetapi-develUpgrade samba-dc-libsUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade samba-common-toolsUpgrade samba-winexeUpgrade samba-winbindUpgrade python3-ldbUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-usersharesUpgrade samba-winbind-krb5-locatorUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-client-libsUpgrade libwbclientUpgrade sambaUpgrade samba-dcerpcUpgrade python3-sambaUpgrade python3-samba-testUpgrade libnetapi | Jun 16, 2026 | Jun 10, 2026 |
| Alpine Linux | — | Upgrade samba | May 29, 2026 | May 27, 2026 |
| Debian | — | Upgrade samba | May 27, 2026 | May 27, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 10, 2026 | May 27, 2026 |
| Redhat_linux | — | Upgrade samba-winexe-debuginfoUpgrade python3-ldb-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade libnetapiUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libsUpgrade python3-samba-dc-debuginfoUpgrade samba-testUpgrade samba-client-debuginfoUpgrade ldb-toolsUpgrade samba-dcerpc-debuginfoUpgrade python3-samba-dcUpgrade samba-libs-debuginfoUpgrade samba-pidlUpgrade samba-libsUpgrade sambaUpgrade samba-winbind-clients-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-debuginfoUpgrade ldb-tools-debuginfoUpgrade libwbclientUpgrade python3-samba-debuginfoUpgrade samba-commonUpgrade samba-krb5-printingUpgrade samba-test-libsNo solution existsUpgrade samba-test-debuginfoUpgrade libsmbclient-debuginfoUpgrade libsmbclient-develUpgrade samba-vfs-iouringUpgrade samba-winbind-debuginfoUpgrade samba-develUpgrade python3-sambaUpgrade libldb-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-common-tools-debuginfoUpgrade python3-ldbUpgrade samba-winbindUpgrade samba-dcerpcUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-develUpgrade libldbUpgrade samba-gpupdateUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libnetapi-develUpgrade ctdbUpgrade samba-test-libs-debuginfoUpgrade samba-clientUpgrade libwbclient-debuginfoUpgrade libldb-develUpgrade samba-usersharesUpgrade samba-client-libs-debuginfoUpgrade libsmbclientUpgrade ctdb-debuginfoUpgrade samba-toolsUpgrade samba-common-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libwbclient-develUpgrade libnetapi-debuginfoUpgrade samba-dc-libsUpgrade samba-winexe | Jun 5, 2026 | May 27, 2026 |
| Rocky_linux | — | Upgrade ldb-tools-debuginfoUpgrade samba-common-tools-debuginfoUpgrade python3-sambaUpgrade libnetapiUpgrade python3-ldb-debuginfoUpgrade sambaUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-develUpgrade samba-winbindUpgrade samba-usersharesUpgrade samba-krb5-printingUpgrade samba-vfs-iouringUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-test-debuginfoUpgrade samba-client-libsUpgrade libsmbclient-debuginfoUpgrade samba-debuginfoUpgrade libldb-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade samba-testUpgrade samba-winexe-debuginfoUpgrade ldb-toolsUpgrade libnetapi-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-toolsUpgrade samba-dcerpc-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade ctdb-debuginfoUpgrade python3-samba-develUpgrade samba-common-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade libwbclientUpgrade samba-dc-libs-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade libsmbclientUpgrade python3-samba-dcUpgrade libnetapi-develUpgrade python3-samba-debuginfoUpgrade libldbUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-debuginfoUpgrade samba-common-toolsUpgrade samba-winexeUpgrade libldb-develUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-debugsourceUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-common-libsUpgrade ctdbUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-dcerpcUpgrade python3-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libs-debuginfoUpgrade python3-ldb | Jun 17, 2026 | Jun 13, 2026 |
| Suse | — | Upgrade libsamba-policy-develUpgrade samba-winbind-libsUpgrade samba-client-32bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-toolUpgrade ctdb-pcp-pmdaUpgrade libldb-develUpgrade python3-ldbUpgrade samba-ldb-ldapUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade samba-client-libs-32bitUpgrade samba-python3Upgrade samba-clientUpgrade samba-client-libsUpgrade samba-ad-dc-libsUpgrade samba-libs-python3-32bitUpgrade samba-client-langUpgrade libsamba-policy-python3-develUpgrade samba-gpupdateUpgrade samba-winbind-libs-langUpgrade samba-winbind-libs-32bitUpgrade samba-cephUpgrade samba-dsdb-modulesUpgrade samba-devel-32bitUpgrade ctdbUpgrade samba-docUpgrade samba-dcerpcUpgrade libsamba-policy0-python3-32bitUpgrade samba-testUpgrade sambaUpgrade libldb2Upgrade libldb2-32bitUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade ldb-toolsUpgrade samba-libs-python3Upgrade samba-develUpgrade samba-ad-dc | May 27, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade samba | May 27, 2026 | May 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub