Critical Samba Security Update: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:25049: Critical: samba security update. Affects ldb-tools versions < 4.23.5-10.el9_8. Fixed in 4.23.5-10.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the Common Internet File System (CIFS) protocol, enabling PC-compatible machines to share files, printers, and various information. It is widely used in both enterprise and home environments for file sharing and printer services. The recent vulnerabilities in Samba pose significant security risks, necessitating immediate attention and remediation.
Vulnerability Detail
The vulnerabilities in Samba include missing access checks on reparse point operations, inadequate blocking of directory modifications by vfs_worm, and unvalidated group policy certificate enrollment. Additionally, there are critical remote code execution vulnerabilities in the printing subsystem and SAMR, which could allow attackers to execute arbitrary code on affected systems. These vulnerabilities stem from flaws in the Samba codebase, making it imperative for users to update to the latest patched versions to mitigate risks.
How To Fix
Minimum fixed version
4.23.5-10.el9_8
This is the first release that contains the fix.
sudo dnf update ldb-toolsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to Samba services or disable the affected features until the update is applied. This can be done by modifying the Samba configuration file (smb.conf) to limit access to trusted users only.
Conclusion
The recent Samba vulnerabilities pose critical risks that require immediate attention. Users are strongly advised to update their packages to the latest patched versions to protect their systems from potential exploits. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for ldb-tools →
FAQ
Samba is an open-source software suite that provides seamless file and print services to SMB/CIFS clients.
The vulnerabilities could lead to unauthorized access, data breaches, and remote code execution, potentially compromising the entire system.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software by analyzing your manifest file.
While updating is the best solution, temporarily restricting access to Samba services can help mitigate risks until the update is applied.
Detailed information about the vulnerabilities can be found on the CVE pages linked in the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for ldb-tools.
