A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-samba | Nov 11, 2025 | Jun 6, 2025 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jun 6, 2025 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | Jun 6, 2025 |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-ctdb-pcp-pmdasuse-upgrade-ldb-toolssuse-upgrade-libldb-develsuse-upgrade-libldb2suse-upgrade-libldb2-32bitsuse-upgrade-python3-ldbsuse-upgrade-sambasuse-upgrade-samba-ad-dcsuse-upgrade-samba-ad-dc-libssuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-libssuse-upgrade-samba-client-libs-32bitsuse-upgrade-samba-dcerpcsuse-upgrade-samba-develsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-gpupdatesuse-upgrade-samba-ldb-ldapsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-python3suse-upgrade-samba-toolsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-libssuse-upgrade-samba-winbind-libs-32bit | Jul 7, 2025 | Jun 6, 2025 |
| Ubuntu | ubuntu-upgrade-samba | Jun 11, 2025 | Jun 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub