A flaw was found in Samba, in the vfs_streams_xattr module, where uninitialized heap memory could be written into alternate data streams. This allows an authenticated user to read residual memory content that may include sensitive data, resulting in an information disclosure vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Nov 10, 2025 | Oct 15, 2025 |
| Amazon_linux_2023 | — | Upgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-test-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-dcerpcUpgrade samba-winbind-clientsUpgrade samba-libs-debuginfoUpgrade samba-winbindUpgrade python3-samba-testUpgrade samba-client-libsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade libwbclient-develUpgrade libnetapiUpgrade samba-ldb-ldap-modulesUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade libsmbclient-develUpgrade python3-samba-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-libsUpgrade samba-winbind-debuginfoUpgrade samba-vfs-iouringUpgrade python3-samba-dc-debuginfoUpgrade python3-samba-dcUpgrade libsmbclient-debuginfoUpgrade samba-common-tools-debuginfoUpgrade libwbclientUpgrade samba-test-libs-debuginfoUpgrade libnetapi-develUpgrade libnetapi-debuginfoUpgrade samba-usersharesUpgrade samba-develUpgrade samba-debuginfoUpgrade python3-samba-develUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade samba-dc-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-common-libs-debuginfoUpgrade samba-commonUpgrade libwbclient-debuginfoUpgrade samba-toolsUpgrade python3-sambaUpgrade samba-winbind-modules-debuginfoUpgrade samba-testUpgrade samba | Oct 28, 2025 | Oct 15, 2025 |
| Debian | — | Upgrade samba | Nov 28, 2025 | Nov 28, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwbclientUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-winbindUpgrade libsmbclient | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libwbclientUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade sambaUpgrade samba-clientUpgrade samba-winbindUpgrade samba-commonUpgrade samba-winbind-clients | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-clientUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-libsUpgrade libwbclient | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-winbindUpgrade sambaUpgrade samba-libsUpgrade samba-client-libs | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 15, 2025 |
| Samba | — | Upgrade to Samba 4.23.2 or later.Upgrade to Samba 4.21.9 or later.Upgrade to Samba 4.22.5 or later. | Apr 3, 2026 | Oct 15, 2025 |
| Suse | — | Upgrade samba-testUpgrade samba-devel-32bitUpgrade samba-python3Upgrade libsamba-policy0-python3Upgrade samba-winbindUpgrade ldb-toolsUpgrade samba-dsdb-modulesUpgrade python3-ldbUpgrade samba-ldb-ldapUpgrade samba-client-libsUpgrade libsamba-policy-python3-develUpgrade libsamba-policy-develUpgrade samba-libsUpgrade samba-docUpgrade libldb2Upgrade samba-winbind-libsUpgrade samba-libs-python3-32bitUpgrade samba-client-libs-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-winbind-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-ad-dc-libs-32bitUpgrade ctdbUpgrade samba-client-32bitUpgrade libldb2-32bitUpgrade sambaUpgrade samba-gpupdateUpgrade samba-dcerpcUpgrade samba-cephUpgrade samba-toolUpgrade samba-clientUpgrade samba-libs-python3Upgrade samba-ad-dc-libsUpgrade libldb-develUpgrade samba-libs-32bitUpgrade samba-devel | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Oct 21, 2025 | Oct 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 22, 2026 | Oct 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub