A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade libnetapi-develUpgrade samba-testUpgrade samba-client-debuginfoUpgrade samba-develUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade libnetapi-debuginfoUpgrade python3-samba-dcUpgrade python3-samba-debuginfoUpgrade samba-commonUpgrade samba-test-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade python3-samba-develUpgrade samba-clientUpgrade samba-dc-libsUpgrade samba-common-tools-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-common-libsUpgrade samba-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-debugsourceUpgrade samba-libsUpgrade libsmbclient-develUpgrade samba-toolsUpgrade samba-test-libsUpgrade samba-pidlUpgrade sambaUpgrade samba-ldb-ldap-modulesUpgrade libsmbclientUpgrade libsmbclient-debuginfoUpgrade python3-sambaUpgrade python3-samba-testUpgrade libwbclient-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-dcerpc-debuginfoUpgrade libnetapiUpgrade samba-dc-libs-debuginfoUpgrade samba-client-libsUpgrade samba-dcerpcUpgrade libwbclient-develUpgrade samba-usersharesUpgrade python3-samba-dc-debuginfoUpgrade samba-vfs-iouringUpgrade libwbclient | Sep 30, 2026 | Jul 30, 2026 |
| Debian | — | Upgrade samba | Jul 29, 2026 | Jul 29, 2026 |
| Ubuntu | — | Upgrade samba | Jul 28, 2026 | Jul 28, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 16, 2026 | Jul 30, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub