Critical Samba Vulnerability in AlmaLinux 10: Security Update Required
Summary
ALSA-2026:22963: Critical: samba security update. Affects ldb-tools versions < 4.23.5-109.el10_2. Fixed in 4.23.5-109.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the Common Internet File System (CIFS) protocol, enabling file and printer sharing among PC-compatible machines. It is widely used in various environments for its ability to facilitate interoperability between different operating systems. However, recent vulnerabilities have been identified that could compromise the security of systems utilizing Samba, necessitating immediate attention and updates.
Vulnerability Detail
The Samba security update addresses multiple critical vulnerabilities, including missing access checks on reparse point operations (CVE-2026-1933), inadequate directory modification protections in vfs_worm (CVE-2026-2340), and remote code execution risks in the printing subsystem and SAMR (CVE-2026-4480, CVE-2026-4408). These vulnerabilities could allow unauthorized access, data manipulation, and execution of arbitrary code, posing significant risks to system integrity and confidentiality.
How To Fix
Minimum fixed version
4.23.5-109.el10_2
This is the first release that contains the fix.
sudo dnf update ldb-toolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to Samba services and limit exposure to untrusted networks until the update can be applied. This can be achieved by modifying firewall rules to block unnecessary ports and services.
Conclusion
The identified vulnerabilities in Samba pose significant risks to systems running AlmaLinux 10. Immediate action is required to update affected packages to the patched version to ensure system security. Users are encouraged to monitor their systems and apply the necessary updates promptly.
See every vulnerability recorded for ldb-tools →
FAQ
Samba is an open-source software suite that provides seamless file and print services to SMB/CIFS clients.
The vulnerabilities could lead to unauthorized access, data breaches, and remote code execution, compromising system security.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Implement temporary workarounds such as restricting access to Samba services and limiting exposure to untrusted networks.
Detailed information can be found on the CVE pages referenced in the security update advisory.
Related vulnerabilities
Recent vulnerabilities recorded for ldb-tools.
