Summary
It was discovered that Samba incorrectly handled certain group membership
changes when using Kerberos authentication. A remote user could possibly
use this issue to continue to access resources after being removed by an
administrator.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 25.04 | samba | 2:4.21.4+dfsg-1ubuntu3.1 |
Vulnerabilities 1
-
Medium 4.9
Samba: smbd doesn't pick up group membership changes when re-authenticating an expired smb session
A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.
References
-
report
https://ubuntu.com/security/CVE-2025-0620