CVE-2026-1933

EUVD-2026-32275
A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 55.84%
Affected Products (NVD)
VendorProductVersion
redhatopenshift_container_platform
4.0
sambasamba
4.1.0 ≤
𝑥
< 4.2.2
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
redhatenterprise_linux
10.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 10
0:4.23.5-109.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:4.21.3-114.el10_0.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
0:4.19.4-16.el8_10 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
0:4.15.5-16.el8_6.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
0:4.15.5-16.el8_6.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
0:4.17.5-7.el8_8.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
0:4.17.5-7.el8_8.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:4.23.5-10.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
0:4.17.5-105.el9_2.5 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
0:4.19.4-105.el9_4.4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
0:4.21.3-14.el9_6.1 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.19
4.19.9.6.202606241344-0 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.20
4.20.9.6.202608121719-0 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.21
4.21.9.6.202608122143-0 ≤
𝑥
< *
ADP
Red HatRed Hat OpenShift Container Platform 4.22
4.22.9.8.202608130832-0 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
samba
bookworm
2:4.17.12+dfsg-0+deb12u4
fixed
bookworm (security)
2:4.17.12+dfsg-0+deb12u4
fixed
bullseye
2:4.13.13+dfsg-1~deb11u6
fixed
bullseye (security)
2:4.13.13+dfsg-1~deb11u8
fixed
forky
2:4.24.5+dfsg-1
fixed
sid
2:4.24.6+dfsg-1
fixed
trixie
2:4.22.10+dfsg-0+deb13u1
fixed
trixie (security)
2:4.22.10+dfsg-0+deb13u2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
samba
bionic
not-affected
focal
not-affected
jammy
not-affected
noble
not-affected
questing
Fixed 2:4.22.3+dfsg-4ubuntu2.4
released
resolute
Fixed 2:4.23.6+dfsg-1ubuntu2.1
released
trusty
not-affected
xenial
not-affected
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
ctdb
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
ldb-tools
RHEL 9
0:4.23.5-10.el9_8
fixed
libldb
RHEL 9
0:4.23.5-10.el9_8
fixed
libldb-devel
RHEL 9
0:4.23.5-10.el9_8
fixed
libnetapi
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
libnetapi-devel
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
libsmbclient
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
libsmbclient-devel
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
libwbclient
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
libwbclient-devel
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
python3-ldb
RHEL 9
0:4.23.5-10.el9_8
fixed
python3-samba
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
python3-samba-dc
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
python3-samba-devel
RHEL 8
0:4.19.4-16.el8_10
fixed
python3-samba-test
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-client
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-client-libs
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-common
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-common-libs
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-common-tools
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-dc-libs
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-dcerpc
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-devel
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-gpupdate
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-krb5-printing
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-ldb-ldap-modules
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-libs
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-pidl
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-test
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-test-libs
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-tools
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-usershares
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-vfs-iouring
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-winbind
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-winbind-clients
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-winbind-krb5-locator
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-winbind-modules
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
samba-winexe
RHEL 8
0:4.19.4-16.el8_10
fixed
RHEL 8.6 AUS
0:4.15.5-16.el8_6.1
fixed
RHEL 8.8 E4S
0:4.17.5-7.el8_8.1
fixed
RHEL 8.8 TUS
0:4.17.5-7.el8_8.1
fixed
RHEL 9
0:4.23.5-10.el9_8
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2026:22644
https://access.redhat.com/errata/RHSA-2026:22963
https://access.redhat.com/errata/RHSA-2026:25049
https://access.redhat.com/errata/RHSA-2026:25979
https://access.redhat.com/errata/RHSA-2026:28053
https://access.redhat.com/errata/RHSA-2026:28054
https://access.redhat.com/errata/RHSA-2026:28055
https://access.redhat.com/errata/RHSA-2026:28056
https://access.redhat.com/errata/RHSA-2026:28057
https://access.redhat.com/errata/RHSA-2026:29863
https://access.redhat.com/errata/RHSA-2026:54581
https://access.redhat.com/errata/RHSA-2026:54599
https://access.redhat.com/errata/RHSA-2026:54769
https://access.redhat.com/security/cve/CVE-2026-1933
https://bugzilla.redhat.com/show_bug.cgi?id=2447317
https://bugzilla.samba.org/show_bug.cgi?id=15992
https://access.redhat.com/errata/RHSA-2026:22644
https://access.redhat.com/errata/RHSA-2026:22963
https://access.redhat.com/errata/RHSA-2026:25049
https://access.redhat.com/errata/RHSA-2026:25979
https://access.redhat.com/errata/RHSA-2026:28053
https://access.redhat.com/errata/RHSA-2026:28054
https://access.redhat.com/errata/RHSA-2026:28055
https://access.redhat.com/errata/RHSA-2026:28056
https://access.redhat.com/errata/RHSA-2026:28057
https://access.redhat.com/errata/RHSA-2026:29863
https://access.redhat.com/errata/RHSA-2026:54581
https://access.redhat.com/errata/RHSA-2026:54599
https://access.redhat.com/errata/RHSA-2026:54769
https://access.redhat.com/security/cve/CVE-2026-1933
https://bugzilla.redhat.com/show_bug.cgi?id=2447317
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1933.json