A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 10, 2025 | Oct 15, 2025 |
| Amazon_linux_2023 | — | Upgrade samba-commonUpgrade samba-common-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade python3-samba-dcUpgrade sambaUpgrade samba-testUpgrade python3-samba-develUpgrade libsmbclient-debuginfoUpgrade python3-sambaUpgrade samba-winbind-modules-debuginfoUpgrade libwbclientUpgrade samba-common-tools-debuginfoUpgrade samba-toolsUpgrade libnetapi-develUpgrade samba-develUpgrade libnetapi-debuginfoUpgrade samba-vfs-iouringUpgrade samba-debugsourceUpgrade samba-pidlUpgrade samba-usersharesUpgrade samba-debuginfoUpgrade samba-krb5-printingUpgrade python3-samba-dc-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-libs-debuginfoUpgrade samba-libsUpgrade samba-dcerpc-debuginfoUpgrade samba-dc-libsUpgrade libnetapiUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-debuginfoUpgrade samba-test-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbindUpgrade python3-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-client-debuginfoUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-dcerpcUpgrade libsmbclient-develUpgrade samba-common-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-client-libs-debuginfo | Oct 28, 2025 | Oct 15, 2025 |
| Debian | — | Upgrade samba | Nov 28, 2025 | Nov 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbindUpgrade sambaUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade libsmbclient | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-commonUpgrade samba-clientUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-clients | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-winbindUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-common-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libwbclientUpgrade sambaUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-client | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 15, 2025 |
| Samba | — | Upgrade to Samba 4.21.9 or later.Upgrade to Samba 4.23.2 or later.Upgrade to Samba 4.22.5 or later. | Apr 3, 2026 | Oct 15, 2025 |
| Suse | — | Upgrade samba-ad-dc-libs-32bitUpgrade libldb-develUpgrade samba-ad-dc-libsUpgrade samba-libs-32bitUpgrade ctdbUpgrade libsamba-policy0-python3-32bitUpgrade libldb2-32bitUpgrade samba-libs-python3Upgrade sambaUpgrade samba-winbind-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-develUpgrade samba-client-32bitUpgrade samba-gpupdateUpgrade samba-dcerpcUpgrade samba-cephUpgrade samba-toolUpgrade samba-clientUpgrade samba-libs-python3-32bitUpgrade libsamba-policy-develUpgrade samba-python3Upgrade samba-client-libs-32bitUpgrade samba-devel-32bitUpgrade samba-winbindUpgrade samba-testUpgrade libsamba-policy0-python3Upgrade samba-client-libsUpgrade samba-docUpgrade python3-ldbUpgrade libldb2Upgrade libsamba-policy-python3-develUpgrade samba-dsdb-modulesUpgrade ldb-toolsUpgrade samba-winbind-libsUpgrade samba-ldb-ldapUpgrade samba-libs | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Oct 21, 2025 | Oct 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 22, 2026 | Oct 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub