A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libnetapi-develUpgrade libldb-develUpgrade libldbUpgrade samba-dc-libsUpgrade python3-samba-dcUpgrade samba-gpupdateUpgrade libwbclient-develUpgrade samba-pidlUpgrade samba-toolsUpgrade samba-test-libsUpgrade samba-vfs-iouringUpgrade ldb-toolsUpgrade samba-testUpgrade samba-commonUpgrade samba-develUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printingUpgrade python3-samba-testUpgrade samba-clientUpgrade samba-winbindUpgrade samba-winexeUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-dcerpcUpgrade python3-ldbUpgrade samba-common-toolsUpgrade python3-sambaUpgrade sambaUpgrade libwbclientUpgrade samba-usersharesUpgrade libnetapiUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-clients | Jun 16, 2026 | Jun 10, 2026 |
| Alpine Linux | — | Upgrade samba | May 29, 2026 | May 27, 2026 |
| Debian | — | Upgrade samba | May 27, 2026 | May 27, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 10, 2026 | May 27, 2026 |
| Redhat_linux | — | Upgrade python3-samba-testUpgrade samba-winbindUpgrade ctdb-debuginfoUpgrade libwbclient-debuginfoUpgrade libnetapi-develUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-clientsUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade libldb-develUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-winbind-modulesUpgrade samba-gpupdateUpgrade python3-samba-develUpgrade libldbUpgrade samba-usersharesUpgrade samba-dcerpcUpgrade python3-ldbUpgrade samba-dc-libs-debuginfoUpgrade ctdbUpgrade libnetapi-debuginfoUpgrade samba-debugsourceUpgrade samba-toolsUpgrade samba-common-tools-debuginfoUpgrade samba-clientUpgrade samba-common-libs-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libldb-debuginfoUpgrade libsmbclientUpgrade samba-client-libs-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-toolsUpgrade samba-winexeUpgrade samba-client-debuginfoUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-winexe-debuginfoUpgrade libwbclientUpgrade samba-dcerpc-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade libsmbclient-develUpgrade samba-winbind-modules-debuginfoUpgrade samba-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-pidlUpgrade ldb-toolsUpgrade ldb-tools-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-libs-debuginfoUpgrade libsmbclient-debuginfoNo solution existsUpgrade samba-develUpgrade python3-sambaUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-dc-debuginfoUpgrade samba-vfs-iouringUpgrade samba-client-libsUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-dcUpgrade samba-test-debuginfoUpgrade samba-commonUpgrade python3-ldb-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-libsUpgrade libnetapiUpgrade samba | Jun 5, 2026 | May 27, 2026 |
| Rocky_linux | — | Upgrade samba-winexe-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade ldb-toolsUpgrade libldb-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-debuginfoUpgrade samba-testUpgrade samba-dc-libs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade sambaUpgrade python3-sambaUpgrade ldb-tools-debuginfoUpgrade libsmbclient-develUpgrade samba-winbind-clients-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-winbindUpgrade libwbclient-develUpgrade python3-ldb-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-krb5-printingUpgrade samba-test-debuginfoUpgrade samba-vfs-iouringUpgrade samba-common-libs-debuginfoUpgrade samba-libsUpgrade samba-toolsUpgrade samba-usersharesUpgrade python3-samba-develUpgrade libnetapiUpgrade libwbclientUpgrade samba-krb5-printing-debuginfoUpgrade ctdb-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade libnetapi-debuginfoUpgrade samba-client-libsUpgrade samba-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-test-libsUpgrade libsmbclientUpgrade libldb-develUpgrade samba-test-libs-debuginfoUpgrade libnetapi-develUpgrade python3-samba-debuginfoUpgrade python3-samba-dcUpgrade python3-ldbUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-debugsourceUpgrade samba-dc-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-dcerpcUpgrade python3-samba-testUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-modulesUpgrade samba-develUpgrade ctdbUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libsUpgrade samba-client-libs-debuginfoUpgrade samba-winexeUpgrade samba-winbind-debuginfoUpgrade samba-client-debuginfoUpgrade samba-clientUpgrade libldb | Jun 17, 2026 | Jun 13, 2026 |
| Suse | — | Upgrade samba-winbind-libs-32bitUpgrade libldb2-32bitUpgrade ctdbUpgrade libldb2Upgrade libsamba-policy0-python3-32bitUpgrade samba-testUpgrade samba-docUpgrade sambaUpgrade samba-gpupdateUpgrade samba-ad-dcUpgrade samba-dsdb-modulesUpgrade samba-devel-32bitUpgrade samba-dcerpcUpgrade samba-winbind-libs-langUpgrade samba-cephUpgrade samba-develUpgrade samba-libs-32bitUpgrade samba-winbindUpgrade samba-libs-python3Upgrade ldb-toolsUpgrade samba-clientUpgrade samba-client-langUpgrade ctdb-pcp-pmdaUpgrade samba-winbind-libsUpgrade samba-libs-python3-32bitUpgrade libldb-develUpgrade libsamba-policy-develUpgrade samba-ad-dc-libsUpgrade libsamba-policy-python3-develUpgrade samba-python3Upgrade samba-client-libsUpgrade samba-ldb-ldapUpgrade python3-ldbUpgrade samba-libsUpgrade samba-client-libs-32bitUpgrade libsamba-policy0-python3Upgrade samba-client-32bitUpgrade samba-toolUpgrade samba-ad-dc-libs-32bit | May 27, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade samba | May 27, 2026 | May 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub