Improper access control in Samba - CVE-2026-1933

Vulnerability identifier: #VU132340

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-1933

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to modify reparse point metadata on files despite read-only share restrictions.

The vulnerability exists due to improper access control in reparse point operations when handling set or delete requests for reparse point xattrs on files through a read-only share or a read-only file handle. A remote user can set or delete reparse point xattrs on files to modify reparse point metadata on files despite read-only share restrictions.

The issue occurs on shares configured with "read only = yes" and on file handles opened read-only, for files where the user has write access in the underlying file system.

Samba
Debian Linux
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Availability Extension 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Basesystem Module
openEuler
Ubuntu
Fedora
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
samba-dc
samba-pidl
samba-winbind-modules
samba-winbind-krb5-locator
samba-winbind-clients
samba-winbind
samba-test
samba-libs
samba-krb5-printing
samba-help
samba-devel
samba-debugsource
samba-debuginfo
samba-dc-provision
samba-dc-bind-dlz
samba-vfs-glusterfs
samba-common-tools
samba-common
samba-client
python3-samba-test
samba
ctdb
ctdb-tests
libsmbclient
libsmbclient-devel
libwbclient
libwbclient-devel
python3-samba
python3-samba-dc
freeipa
samba (Ubuntu package)
samba-usershares
samba-client-libs
samba-dc-libs
samba (Debian package)
samba-tools
samba (Red Hat package)
samba-client-debuginfo
ldb-tools-debuginfo
samba-ldb-ldap-debuginfo
samba-ldb-ldap
samba-python3-debuginfo
ldb-tools
samba-winbind-libs-debuginfo
samba-libs-python3-debuginfo
samba-libs-python3
samba-libs-debuginfo
samba-gpupdate
libldb-devel
samba-tool
python3-ldb-debuginfo
samba-client-libs-debuginfo
samba-winbind-libs
samba-dcerpc
samba-python3
samba-winbind-debuginfo
samba-dcerpc-debuginfo
ctdb-debuginfo
samba-client-libs-32bit
samba-winbind-libs-32bit
samba-client-libs-32bit-debuginfo
samba-libs-32bit
samba-libs-32bit-debuginfo
libldb2-32bit-debuginfo
samba-winbind-libs-32bit-debuginfo
libldb2-32bit
samba-ceph-debuginfo
samba-ceph
libldb2-debuginfo
python3-ldb
libldb2
Red Hat OpenShift Container Platform

Install security update from vendor's website.

Samba - addressed in versions 4.22.10, 4.23.8, 4.24.3
samba-dc - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-pidl - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-winbind-modules - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-winbind-krb5-locator - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-winbind-clients - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-winbind - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-test - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-libs - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-krb5-printing - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-help - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-devel - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-debugsource - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-debuginfo - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-dc-provision - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-dc-bind-dlz - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-vfs-glusterfs - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-common-tools - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-common - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba-client - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
python3-samba-test - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
samba - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
ctdb - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
ctdb-tests - update to 4.11.12-38
libsmbclient - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
libsmbclient-devel - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
libwbclient - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
libwbclient-devel - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
python3-samba - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
python3-samba-dc - addressed in versions 4.11.12-38, 4.17.5-15, 4.19.3-9
freeipa - addressed in versions 4.13.1-7.fc43, 4.13.1-12.fc44, 4.13.1-16.fc45
samba (Ubuntu package) - addressed in versions 2:4.15.13+dfsg-0ubuntu1.12, 2:4.19.5+dfsg-4ubuntu9.6, 2:4.22.3+dfsg-4ubuntu2.4, 2:4.23.6+dfsg-1ubuntu2.1
samba-usershares - addressed in versions 4.17.5-15, 4.19.3-9
samba-client-libs - addressed in versions 4.17.5-15, 4.19.3-9
samba-dc-libs - addressed in versions 4.17.5-15, 4.19.3-9
samba (Debian package) - addressed in versions 2:4.17.12+dfsg-0+deb12u4, 2:4.22.8+dfsg-0+deb13u2
samba-tools - update to 4.19.3-9
Red Hat OpenShift Container Platform - update to 4.19.36
samba (Red Hat package) - addressed in versions 4.21.3-14.el9_6.1, 4.23.5-109.el10_2
samba-client - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-client-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
ldb-tools-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-ldb-ldap-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-ldb-ldap - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-python3-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
ldb-tools - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-devel - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-libs-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-libs-python3-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-libs-python3 - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-debugsource - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-libs-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-gpupdate - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb-devel - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-client-libs - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-tool - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
python3-ldb-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-client-libs-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-libs - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-dcerpc - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-python3 - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-libs - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-dcerpc-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
ctdb - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
ctdb-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-client-libs-32bit - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-libs-32bit - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-client-libs-32bit-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-libs-32bit - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-libs-32bit-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb2-32bit-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind-libs-32bit-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb2-32bit - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-ceph-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-ceph - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb2-debuginfo - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba-winbind - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
python3-ldb - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
libldb2 - update to 4.21.10+git.501.277ba349a01-150700.3.26.1
samba - addressed in versions 4.23.8-1.fc43, 4.24.3-1.fc44, 4.24.3-1.fc45

• https://www.samba.org/samba/history/samba-4.24.3.html
• https://www.samba.org/samba/security/CVE-2026-1933.html

• Multiple vulnerabilities in Samba
• Debian update for samba
• SUSE update for samba
• Ubuntu update for samba
• Fedora 45 update for freeipa, samba
• Fedora 44 update for freeipa, samba
• Fedora 43 update for freeipa, samba
• Red Hat Enterprise Linux 10 update for samba
• openEuler 20.03 LTS SP4 update for samba
• openEuler 24.03 LTS SP3 update for samba
• openEuler 24.03 LTS SP1 update for samba
• openEuler 22.03 LTS SP4 update for samba
• Red Hat Enterprise Linux 9 update for samba
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19