A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active Directory Domain Controller’s wins hook, allowing an unauthenticated network attacker to achieve remote command execution as the Samba process.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 10, 2025 | Nov 7, 2025 |
| Debian | — | Upgrade samba | Jan 12, 2026 | Jan 12, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade sambaUpgrade libsmbclientUpgrade samba-winbindUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-libsUpgrade samba-common | Dec 12, 2025 | Dec 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade samba-commonUpgrade sambaUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade libsmbclientUpgrade samba-libsUpgrade samba-clientUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-tools | Dec 12, 2025 | Dec 11, 2025 |
| Samba | — | Upgrade to Samba 4.22.5 or later.Upgrade to Samba 4.21.9 or later.Upgrade to Samba 4.23.2 or later. | Apr 3, 2026 | Nov 7, 2025 |
| Suse | — | Upgrade samba-libsUpgrade ctdbUpgrade python3-ldbUpgrade samba-devel-32bitUpgrade samba-client-32bitUpgrade samba-testUpgrade samba-cephUpgrade samba-client-libsUpgrade samba-libs-python3-32bitUpgrade samba-client-libs-32bitUpgrade libldb2-32bitUpgrade libsamba-policy0-python3Upgrade samba-dsdb-modulesUpgrade ldb-toolsUpgrade samba-dcerpcUpgrade samba-winbind-libsUpgrade libsamba-policy-python3-develUpgrade samba-libs-python3Upgrade libsamba-policy-develUpgrade samba-ad-dc-libsUpgrade sambaUpgrade samba-toolUpgrade samba-docUpgrade samba-clientUpgrade samba-gpupdateUpgrade samba-winbindUpgrade samba-develUpgrade libsamba-policy0-python3-32bitUpgrade samba-ldb-ldapUpgrade samba-ad-dc-libs-32bitUpgrade samba-python3Upgrade samba-libs-32bitUpgrade libldb-develUpgrade libldb2Upgrade samba-winbind-libs-32bitUpgrade ctdb-pcp-pmda | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Oct 21, 2025 | Oct 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 7, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub