Critical Samba Security Update: Vulnerabilities in Multiple Packages
Summary
RHSA-2026:28057: Red Hat Security Advisory: samba security update. Affects ctdb versions < 0:4.15.5-16.el8_6.1. Fixed in 0:4.15.5-16.el8_6.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Samba is an open-source software suite that provides seamless file and print services to SMB/CIFS clients. It enables interoperability between Linux/Unix servers and Windows-based clients. The affected packages include ctdb, libsmbclient, libwbclient, and others, which are integral to Samba's functionality. These packages are essential for network file sharing and authentication, making them critical components in many enterprise environments.
Vulnerability Detail
The vulnerabilities identified in Samba (CVE-2026-1933, CVE-2026-2340, CVE-2026-3012, CVE-2026-4408, CVE-2026-4480) stem from improper handling of certain requests, which could allow an attacker to execute arbitrary code, leading to unauthorized access and potential data breaches. The vulnerabilities have a CVSS score of 9.0, indicating a critical severity level. Attackers could exploit these vulnerabilities to compromise system integrity and confidentiality, posing significant risks to organizations relying on Samba for file sharing and authentication.
How To Fix
Minimum fixed version
0:4.15.5-16.el8_6.1
This is the first release that contains the fix.
sudo dnf update ctdbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the Samba services until the packages are updated. This can be done by modifying the firewall rules to block incoming connections to the Samba ports (usually 137, 138, 139, and 445). Use the following command to block these ports:
sudo firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="<your_ip_address>" reject'
Replace <your_ip_address> with the appropriate IP address or range.
Conclusion
The Samba security vulnerabilities pose significant risks to organizations that rely on its functionality for file sharing and authentication. It is crucial to update the affected packages to the patched versions to mitigate these risks. Implementing the recommended updates and workarounds will help secure your systems against potential exploitation.
See every vulnerability recorded for ctdb →
FAQ
Samba is an open-source software suite that provides file and print services for SMB/CIFS clients, enabling interoperability between Linux/Unix servers and Windows clients.
Exploitation of these vulnerabilities could allow attackers to execute arbitrary code, leading to unauthorized access and potential data breaches.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities without needing to sign up.
The vulnerabilities have a CVSS score of 9.0, indicating a critical severity level.
You can update the affected packages using the command: sudo dnf update <package_names> where <package_names> are the names of the affected packages.
Related vulnerabilities
Recent vulnerabilities recorded for ctdb.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
