CVE-2026-58224
published 2026-08-14CVE-2026-58224: A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows…
PriorityP431medium6.5CVSS 3.1
AVAACLPRNUINSUCNINAH
EPSS
0.34%
26.7th percentile
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| samba | samba | <= 4.2.0 | — |
| ubuntu | samba | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat7.1HIGH
vendor_ubuntu6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Samba vulnerabilities
vendor_ubuntu·2026-07-28·CVSS 6.1
CVE-2026-58224 [MEDIUM] Samba vulnerabilities
Title: Samba vulnerabilities
Summary: Several security issues were fixed in Samba.
It was discovered that Samba's pam_winbind incorrectly handled home
directory ownership when mkhomedir was enabled. A local attacker could
possibly use this issue to cause a denial of service by triggering a change
in ownership of the root directory. (CVE-2026-15779)
Arjun Basnet, Douglas Bagnall, and Andrew Tridgell discovered that Samba
incorrectly handled TSIG packets with name compression. A remote attacker
could possibly use this issue to cause Samba to crash, resulting in a
denial of service. (CVE-2026-6949)
Tristan Madani discovered that Samba incorrectly handled malformed ASN.1
kpasswd packets. An authenticated user could possibly use this issue to
cause Samba to crash, resulting in a denial of s
Red Hat
samba: CTDB fails to do integrity checking of received packets
vendor_redhat·2026-07-28·CVSS 7.1
CVE-2026-58224 [HIGH] samba: CTDB fails to do integrity checking of received packets
samba: CTDB fails to do integrity checking of received packets
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.
Package: samba (Red Hat Enterprise Linux 10) - Not affected
Package: samba (Red Hat Enterprise Linux 6) - Not affected
Package: samba4 (Red Hat Enterprise Linux 6) - Not affected
Package: samba (Red Hat Enterpri
GHSA
A flaw was found in Samba's CTDB, the clustered database service used by Samba.
ghsa_unreviewed·2026-08-14
CVE-2026-58224 [MEDIUM] CWE-353 A flaw was found in Samba's CTDB, the clustered database service used by Samba.
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-58224 samba: CTDB fails to do integrity checking of received packets [fedora-all]
bugzilla·2026-08-12
CVE-2026-58224 [HIGH] CVE-2026-58224 samba: CTDB fails to do integrity checking of received packets [fedora-all]
CVE-2026-58224 samba: CTDB fails to do integrity checking of received packets [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
CTDB fails to do a number of integrity checks on received packets. This result in denial of service (DoS) (due to crash or out-of memory) and possible limited disclosure of adjacent memory allocations.
Bugzilla
CVE-2026-58224 samba: CTDB fails to do integrity checking of received packets
bugzilla·2026-07-20
CVE-2026-58224 [HIGH] CVE-2026-58224 samba: CTDB fails to do integrity checking of received packets
CVE-2026-58224 samba: CTDB fails to do integrity checking of received packets
CTDB fails to do a number of integrity checks on received packets. This result in denial of service (DoS) (due to crash or out-of memory) and possible limited disclosure of adjacent memory allocations.
2026-08-14
Published