Description
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | samba | samba 4.15.2, samba 4.14.10, samba 4.13.14 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 2:4.13.14+dfsg-1 | — |
| Debian 13 | samba | 2:4.13.14+dfsg-1 | — |
| Debian 12 | samba | 2:4.13.14+dfsg-1 | — |
| Debian 11 | samba | 2:4.13.13+dfsg-1~deb11u2 | DSA-5003-1 |
| Debian 10 | samba | 2:4.9.5+dfsg-5+deb10u2 | DSA-5015-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | samba | 2:4.13.14+dfsg-0ubuntu1 | — |
| Ubuntu 20.04 LTS | samba | 2:4.13.14+dfsg-0ubuntu0.20.04.1 | USN-5142-1 |
| Ubuntu 18.04 LTS | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.26 | USN-5174-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 16.04 LTS | samba | No fix yet | — |
| Ubuntu Pro 14.04 LTS | samba | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | ctdb +24 | 4.14.5-7.el8_5 | RHSA-2021:5082 |
| RHEL 7 | ctdb +26 | 4.10.16-17.el7_9 | RHSA-2021:5192 |
| RHEL 7 | redhat-virtualization-host +1 | 4.3.21-20220126.0.el7_9 | RHSA-2022:0443 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Hypervisor 4 | redhat-virtualization-host +1 | 4.4.9-202201072228_8.5 | RHSA-2022:0133 |
| RHEL 8.4 EUS | ctdb +24 | 4.13.3-8.el8_4 | RHSA-2022:0008 |
| RHEL 8.2 EUS | ctdb +22 | 4.11.2-18.el8_2 | RHSA-2022:0074 |
| Red Hat Gluster Storage 3 | ctdb +20 | 4.11.6-114.el7rhgs | RHSA-2021:4844, RHSA-2021:4843 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | samba-devel +3 | 4.14.5-7.el8_5 | ALSA-2022:0332, ALSA-2021:5082 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | samba | 4.14.5-7.el8_5 | RLSA-2021:5082 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP3 | ldb | 2.2.2-3.3.1 | SUSE-SU-2021:3647-1 |
| SLES 15 SP3 | samba | 4.13.13+git.528.140935f8d6a-3.12.1 | SUSE-SU-2021:3662-1, SUSE-SU-2021:3647-1, SUSE-RU-2021:4149-1 |
| SLES 15 SP2 | samba | 4.11.14+git.308.666c63d4eea-4.28.1 | SUSE-SU-2021:3650-1, SUSE-RU-2021:4173-2, SUSE-RU-2021:4173-1 |
| SLES 15 SP1 | samba | 4.9.5+git.471.5edbe3dcae7-3.57.2 | SUSE-SU-2021:3674-1, SUSE-RU-2021:4117-1 |
| SLES 15 | samba | 4.7.11+git.352.41e30c5a0f7-4.57.1 | SUSE-SU-2021:3747-1, SUSE-RU-2021:4127-1 |
| SLES 12 SP5 | samba | 4.10.18+git.339.c912385a5e1-3.41.1 | SUSE-SU-2021:3649-1, SUSE-RU-2021:4095-1 |
Show 24 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP4 | samba | 4.6.16+git.307.b3899d08cc6-3.64.2 | SUSE-SU-2021:3746-1, SUSE-RU-2021:4126-1 |
| SLES 12 SP3 | samba | 4.6.16+git.307.b3899d08cc6-3.64.2 | SUSE-SU-2021:3746-1, SUSE-RU-2021:4126-1 |
| SLES 12 SP2 | samba | 4.4.2-38.45.2 | SUSE-SU-2021:3673-1 |
| SLES 2 | samba | 4.11.14+git.308.666c63d4eea-4.28.1 | SUSE-SU-2021:3662-1, SUSE-SU-2021:3650-1, SUSE-SU-2021:3647-1 |
| SLES for SAP 15 SP2 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 | SUSE-RU-2021:4173-1 |
| SLES for SAP 15 SP1 | samba | 4.9.5+git.471.5edbe3dcae7-3.57.2 | SUSE-SU-2021:3674-1, SUSE-RU-2021:4117-1 |
| SLES for SAP 15 | samba | 4.7.11+git.352.41e30c5a0f7-4.57.1 | SUSE-SU-2021:3747-1, SUSE-RU-2021:4127-1 |
| SLES for SAP 12 SP5 | samba | 4.10.18+git.339.c912385a5e1-3.41.1 | SUSE-SU-2021:3649-1, SUSE-RU-2021:4095-1 |
| SLES for SAP 12 SP4 | samba | 4.6.16+git.307.b3899d08cc6-3.64.2 | SUSE-SU-2021:3746-1, SUSE-RU-2021:4126-1 |
| SLES for SAP 12 SP3 | samba | 4.6.16+git.307.b3899d08cc6-3.64.2 | SUSE-SU-2021:3746-1, SUSE-RU-2021:4126-1 |
| SLE Micro 5.1 | ldb | 2.2.2-3.3.1 | SUSE-SU-2021:3647-1 |
| SLE HPC 15 SP2 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 | SUSE-RU-2021:4173-1 |
| SLE HPC 15 SP1 | samba | 4.9.5+git.471.5edbe3dcae7-3.57.2 | SUSE-SU-2021:3674-1, SUSE-RU-2021:4117-1 |
| SLE HPC 15 | samba | 4.7.11+git.352.41e30c5a0f7-4.57.1 | SUSE-SU-2021:3747-1, SUSE-RU-2021:4127-1 |
| SUSE OpenStack Cloud Crowbar 9 | samba | 4.6.16+git.307.b3899d08cc6-3.64.2 | SUSE-SU-2021:3746-1, SUSE-RU-2021:4126-1 |
| SUSE OpenStack Cloud Crowbar 8 | samba | 4.6.16+git.307.b3899d08cc6-3.64.2 | SUSE-SU-2021:3746-1, SUSE-RU-2021:4126-1 |
| SUSE OpenStack Cloud 9 | samba | 4.6.16+git.307.b3899d08cc6-3.64.2 | SUSE-SU-2021:3746-1, SUSE-RU-2021:4126-1 |
| SUSE OpenStack Cloud 8 | samba | 4.6.16+git.307.b3899d08cc6-3.64.2 | SUSE-SU-2021:3746-1, SUSE-RU-2021:4126-1 |
| SUSE Manager Server 4.1 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 | SUSE-RU-2021:4173-1 |
| SUSE Manager Retail Branch Server 4.1 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 | SUSE-RU-2021:4173-1 |
| SUSE Manager Proxy 4.1 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 | SUSE-RU-2021:4173-1 |
| SUSE HPE Helion OpenStack 8 | samba | 4.6.16+git.307.b3899d08cc6-3.64.2 | SUSE-SU-2021:3746-1, SUSE-RU-2021:4126-1 |
| SUSE Enterprise Storage 7 | ldb | 2.2.2-4.6.1 | SUSE-SU-2022:0361-1 |
| SUSE Enterprise Storage 7 | samba | 4.11.14+git.313.d4e302805e1-4.32.1 | SUSE-SU-2022:0361-1, SUSE-RU-2021:4173-1 |
| SUSE Enterprise Storage 6 | samba | 4.9.5+git.471.5edbe3dcae7-3.57.2 | SUSE-SU-2021:3674-1, SUSE-RU-2021:4117-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | samba | 4.15.2+git.193.a4d6307f1fd-1.1 | openSUSE-SU-2024:11631-1 |
| openSUSE Leap 15.3 | ldb | 2.2.2-3.3.1 | openSUSE-SU-2021:3647-1 |
| openSUSE Leap 15.3 | samba | 4.9.5+git.471.5edbe3dcae7-3.57.2 | openSUSE-SU-2021:3674-1, openSUSE-SU-2021:3662-1, openSUSE-SU-2021:3650-1 |
| openSUSE Leap 15.2 | samba | 4.11.14+git.308.666c63d4eea-lp152.3.28.1 | openSUSE-SU-2021:1471-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | samba | 4.15.2-r0 | — |
| Alpine v3.23 | samba | 4.15.2-r0 | — |
| Alpine v3.22 | samba | 4.15.2-r0 | — |
| Alpine v3.21 | samba | 4.15.2-r0 | — |
| Alpine v3.20 | samba | 4.15.2-r0 | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | samba | 4.15.2-r0 | — |
| Alpine v3.18 | samba | 4.15.2-r0 | — |
| Alpine v3.17 | samba | 4.15.2-r0 | — |
| Alpine v3.16 | samba | 4.15.2-r0 | — |
| Alpine v3.15 | samba | 4.15.2-r0 | — |
| Alpine v3.14 | samba | 4.14.12-r0 | — |
| Alpine v3.13 | samba | 4.13.17-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | ctdb +26 | 4.10.16-18.amzn2.0.1 | ALAS2-2022-1746 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | samba | 4.18.3-1 | — |
| Azure Linux 2 (CBL-Mariner) | samba | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | ctdb +24 | 4.14.5-7.el8_5 | ELSA-2021-5082 |
| Oracle Linux 7 | ctdb +26 | 4.10.16-17.el7_9 | ELSA-2021-5192 |
Advisories 45
- ALSA-2022:0332 Critical: samba security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2021:5082 Important: samba security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2022-0432 Xerox FreeFlow Print Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2022-0302 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten BSI CERT-Bund (WID) · Oct 11, 2026
- RHSA-2022:0443 Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.21 Red Hat Security Advisories (RHSA) · Aug 7, 2026
- RHSA-2022:0133 Red Hat Security Advisory: Red Hat Virtualization Host security and bug fix update [ovirt-4.4.9] Async #2 Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2022:0074 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2022:0008 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2021:5192 Red Hat Security Advisory: samba security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2021:5082 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2021:4844 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2021:4843 Red Hat Security Advisory: samba security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- USN-5142-1 samba vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-5174-1 samba vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-5003-1 samba - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-5015-1 samba - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2021:5082 Important: samba security update Rocky Linux Security Advisories · Feb 4, 2026
- openSUSE-SU-2021:3650-1 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3662-1 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3649-1 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3746-1 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2021:4126-1 Recommended update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2021:4095-1 Recommended update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:1471-1 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2021:4149-1 Recommended update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11631-1 ctdb-4.15.2+git.193.a4d6307f1fd-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2021:4127-1 Recommended update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2021:4173-2 Recommended update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-RU-2021:4117-1 Recommended update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3650-1 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3647-1 Security update for samba and ldb SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:3662-1 Security update for samba SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0361-1 Security update for ldb, samba SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2022-1335 Xerox FreeFlow Print Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2025
- openSUSE-SU-2021:3647-1 Security update for samba and ldb SUSE / openSUSE Security Updates · May 7, 2025
- openSUSE-SU-2021:3674-1 Security update for samba SUSE / openSUSE Security Updates · May 7, 2025
- SUSE-SU-2021:3747-1 Security update for samba SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-RU-2021:4173-1 Recommended update for samba SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2021:3673-1 Security update for samba SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2021:3674-1 Security update for samba SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2022-2279 Samba: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 21, 2023
- WID-SEC-2022-0676 Juniper Junos Space: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 11, 2023
- ALAS2-2022-1746 Critical: samba security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Mar 7, 2022
- ELSA-2021-5192 Important: samba security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Dec 17, 2021
- ELSA-2021-5082 Important: samba security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Dec 14, 2021