A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 10, 2025 | Oct 15, 2025 |
| Amazon_linux_2023 | — | Upgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade python3-samba-dcUpgrade libwbclient-debuginfoUpgrade sambaUpgrade samba-common-libs-debuginfoUpgrade samba-toolsUpgrade samba-debuginfoUpgrade samba-testUpgrade samba-commonUpgrade samba-krb5-printingUpgrade libnetapi-develUpgrade samba-dc-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-usersharesUpgrade python3-samba-dc-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-pidlUpgrade samba-develUpgrade samba-vfs-iouringUpgrade samba-common-tools-debuginfoUpgrade python3-sambaUpgrade python3-samba-develUpgrade samba-test-libs-debuginfoUpgrade libwbclientUpgrade samba-dc-libsUpgrade samba-client-debuginfoUpgrade samba-dcerpcUpgrade samba-common-toolsUpgrade samba-libsUpgrade libnetapiUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-client-libs-debuginfoUpgrade libwbclient-develUpgrade samba-winbind-debuginfoUpgrade samba-test-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade libsmbclient-develUpgrade samba-libs-debuginfoUpgrade samba-common-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-client-libs | Oct 28, 2025 | Oct 15, 2025 |
| Debian | — | Upgrade samba | Nov 28, 2025 | Nov 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwbclientUpgrade samba-libsUpgrade samba-winbindUpgrade sambaUpgrade samba-clientUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-clients | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-winbind | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade samba-client-libsUpgrade samba-libsUpgrade libwbclientUpgrade samba-commonUpgrade sambaUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-modules | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade samba-client-libsUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-modules | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 15, 2025 |
| Samba | — | Upgrade to Samba 4.21.9 or later.Upgrade to Samba 4.23.2 or later.Upgrade to Samba 4.22.5 or later. | Apr 3, 2026 | Oct 15, 2025 |
| Suse | — | Upgrade samba-ad-dc-libsUpgrade samba-libs-32bitUpgrade libldb-develUpgrade samba-clientUpgrade samba-winbind-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade libldb2-32bitUpgrade sambaUpgrade samba-toolUpgrade samba-client-32bitUpgrade samba-libs-python3Upgrade libsamba-policy0-python3-32bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-cephUpgrade ctdbUpgrade samba-dcerpcUpgrade samba-gpupdateUpgrade samba-develUpgrade samba-docUpgrade samba-libs-python3-32bitUpgrade libsamba-policy-develUpgrade samba-python3Upgrade samba-devel-32bitUpgrade samba-testUpgrade samba-winbindUpgrade python3-ldbUpgrade samba-client-libsUpgrade samba-dsdb-modulesUpgrade ldb-toolsUpgrade samba-winbind-libsUpgrade samba-ldb-ldapUpgrade samba-libsUpgrade samba-client-libs-32bitUpgrade libldb2Upgrade libsamba-policy0-python3Upgrade libsamba-policy-python3-devel | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Oct 21, 2025 | Oct 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 22, 2026 | Oct 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub