909 lines
38 KiB
JSON
909 lines
38 KiB
JSON
{
|
||
"dataType": "CVE_RECORD",
|
||
"dataVersion": "5.2",
|
||
"cveMetadata": {
|
||
"cveId": "CVE-2026-2340",
|
||
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||
"state": "PUBLISHED",
|
||
"assignerShortName": "redhat",
|
||
"dateReserved": "2026-02-11T12:29:16.340Z",
|
||
"datePublished": "2026-05-27T12:09:32.601Z",
|
||
"dateUpdated": "2026-11-05T19:31:57.749Z"
|
||
},
|
||
"containers": {
|
||
"cna": {
|
||
"title": "Samba: vfs_worm does not block directory modification",
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"content": {
|
||
"value": "Moderate",
|
||
"namespace": "https://access.redhat.com/security/updates/classification/"
|
||
},
|
||
"type": "Red Hat severity rating"
|
||
}
|
||
},
|
||
{
|
||
"cvssV3_1": {
|
||
"attackComplexity": "LOW",
|
||
"attackVector": "NETWORK",
|
||
"availabilityImpact": "NONE",
|
||
"baseScore": 6.5,
|
||
"baseSeverity": "MEDIUM",
|
||
"confidentialityImpact": "NONE",
|
||
"integrityImpact": "HIGH",
|
||
"privilegesRequired": "LOW",
|
||
"scope": "UNCHANGED",
|
||
"userInteraction": "NONE",
|
||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
|
||
"version": "3.1"
|
||
},
|
||
"format": "CVSS"
|
||
}
|
||
],
|
||
"descriptions": [
|
||
{
|
||
"lang": "en",
|
||
"value": "A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file."
|
||
}
|
||
],
|
||
"affected": [
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 10",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.23.5-109.el10_2",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/o:redhat:enterprise_linux:10.2"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.21.3-114.el10_0.1",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/o:redhat:enterprise_linux_eus:10.0"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 8",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.19.4-16.el8_10",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:enterprise_linux:8::appstream",
|
||
"cpe:/a:redhat:enterprise_linux:8::crb",
|
||
"cpe:/o:redhat:enterprise_linux:8::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 8",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.19.4-16.el8_10",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:enterprise_linux:8::appstream",
|
||
"cpe:/a:redhat:enterprise_linux:8::crb",
|
||
"cpe:/o:redhat:enterprise_linux:8::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.15.5-16.el8_6.1",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_aus:8.6::appstream",
|
||
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
|
||
"cpe:/o:redhat:rhel_aus:8.6::baseos",
|
||
"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.15.5-16.el8_6.1",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_aus:8.6::appstream",
|
||
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
|
||
"cpe:/o:redhat:rhel_aus:8.6::baseos",
|
||
"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.17.5-7.el8_8.1",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
|
||
"cpe:/a:redhat:rhel_tus:8.8::appstream",
|
||
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
|
||
"cpe:/o:redhat:rhel_tus:8.8::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.17.5-7.el8_8.1",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
|
||
"cpe:/a:redhat:rhel_tus:8.8::appstream",
|
||
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
|
||
"cpe:/o:redhat:rhel_tus:8.8::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 9",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.23.5-10.el9_8",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:enterprise_linux:9::appstream",
|
||
"cpe:/a:redhat:enterprise_linux:9::crb",
|
||
"cpe:/a:redhat:enterprise_linux:9::resilientstorage",
|
||
"cpe:/o:redhat:enterprise_linux:9::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 9",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.23.5-10.el9_8",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:enterprise_linux:9::appstream",
|
||
"cpe:/a:redhat:enterprise_linux:9::crb",
|
||
"cpe:/a:redhat:enterprise_linux:9::resilientstorage",
|
||
"cpe:/o:redhat:enterprise_linux:9::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.17.5-105.el9_2.5",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_e4s:9.2::appstream",
|
||
"cpe:/a:redhat:rhel_e4s:9.2::resilientstorage",
|
||
"cpe:/o:redhat:rhel_e4s:9.2::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.19.4-105.el9_4.4",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_e4s:9.4::appstream",
|
||
"cpe:/a:redhat:rhel_e4s:9.4::resilientstorage",
|
||
"cpe:/o:redhat:rhel_e4s:9.4::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "0:4.21.3-14.el9_6.1",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:rhel_eus:9.6::appstream",
|
||
"cpe:/a:redhat:rhel_eus:9.6::crb",
|
||
"cpe:/a:redhat:rhel_eus:9.6::resilientstorage",
|
||
"cpe:/o:redhat:rhel_eus:9.6::baseos"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.12",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-8",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "412.86.202608241157-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.12::el8"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.12",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-8",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "412.86.202609082051-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.12::el8"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.13",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "413.92.202609080414-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.13::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.13",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "413.92.202609302032-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.13::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.14",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "414.92.202608172040-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.14::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.14",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "414.92.202609011250-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.14::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.15",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "415.92.202608180329-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.15::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.15",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "415.92.202609140326-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.15::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.16",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "416.94.202608150307-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.16::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.16",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "416.94.202609011112-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.16::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.17",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "417.94.202608250221-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.17::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.17",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "417.94.202609191027-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.17::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.18",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "418.94.202608142238-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.18::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.18",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "418.94.202609031320-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.18::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat OpenShift Container Platform 4.19",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "openshift/ose-rhel-coreos-9",
|
||
"defaultStatus": "affected",
|
||
"versions": [
|
||
{
|
||
"version": "4.19.9.6.202606241344-0",
|
||
"lessThan": "*",
|
||
"versionType": "rpm",
|
||
"status": "unaffected"
|
||
}
|
||
],
|
||
"cpes": [
|
||
"cpe:/a:redhat:openshift:4.19::el9"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 6",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "unknown",
|
||
"cpes": [
|
||
"cpe:/o:redhat:rhel_els:6"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 6",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba4",
|
||
"defaultStatus": "unknown",
|
||
"cpes": [
|
||
"cpe:/o:redhat:rhel_els:6"
|
||
]
|
||
},
|
||
{
|
||
"vendor": "Red Hat",
|
||
"product": "Red Hat Enterprise Linux 7",
|
||
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
|
||
"packageName": "samba",
|
||
"defaultStatus": "affected",
|
||
"cpes": [
|
||
"cpe:/o:redhat:rhel_els:7"
|
||
]
|
||
}
|
||
],
|
||
"references": [
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22644",
|
||
"name": "RHSA-2026:22644",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:22963",
|
||
"name": "RHSA-2026:22963",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:25049",
|
||
"name": "RHSA-2026:25049",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:25979",
|
||
"name": "RHSA-2026:25979",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:28053",
|
||
"name": "RHSA-2026:28053",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:28054",
|
||
"name": "RHSA-2026:28054",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:28055",
|
||
"name": "RHSA-2026:28055",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:28056",
|
||
"name": "RHSA-2026:28056",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:28057",
|
||
"name": "RHSA-2026:28057",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:29863",
|
||
"name": "RHSA-2026:29863",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:56786",
|
||
"name": "RHSA-2026:56786",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:56853",
|
||
"name": "RHSA-2026:56853",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:56911",
|
||
"name": "RHSA-2026:56911",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:57483",
|
||
"name": "RHSA-2026:57483",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:59831",
|
||
"name": "RHSA-2026:59831",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:60019",
|
||
"name": "RHSA-2026:60019",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:62409",
|
||
"name": "RHSA-2026:62409",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:62549",
|
||
"name": "RHSA-2026:62549",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:65839",
|
||
"name": "RHSA-2026:65839",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:65851",
|
||
"name": "RHSA-2026:65851",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:65907",
|
||
"name": "RHSA-2026:65907",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:67857",
|
||
"name": "RHSA-2026:67857",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:70586",
|
||
"name": "RHSA-2026:70586",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/errata/RHSA-2026:77320",
|
||
"name": "RHSA-2026:77320",
|
||
"tags": [
|
||
"vendor-advisory",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://access.redhat.com/security/cve/CVE-2026-2340",
|
||
"tags": [
|
||
"vdb-entry",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447318",
|
||
"name": "RHBZ#2447318",
|
||
"tags": [
|
||
"issue-tracking",
|
||
"x_refsource_REDHAT"
|
||
]
|
||
},
|
||
{
|
||
"url": "https://bugzilla.samba.org/show_bug.cgi?id=15997"
|
||
}
|
||
],
|
||
"datePublic": "2026-05-27T10:35:47.805Z",
|
||
"problemTypes": [
|
||
{
|
||
"descriptions": [
|
||
{
|
||
"cweId": "CWE-280",
|
||
"description": "Improper Handling of Insufficient Permissions or Privileges",
|
||
"lang": "en",
|
||
"type": "CWE"
|
||
}
|
||
]
|
||
}
|
||
],
|
||
"x_redhatCweChain": "CWE-280: Improper Handling of Insufficient Permissions or Privileges",
|
||
"workarounds": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Administrators can mitigate this issue by:\n\nSetting read-only permissions on protected files at the underlying filesystem level will prevent modifications.\n\nConfiguring ```worm:grace_period = 0``` (zero or less) in smb.conf will eliminate the writable grace period (will eliminate the window in which the rename can happen), understanding that this may impact workflows requiring multi-step file creation."
|
||
}
|
||
],
|
||
"timeline": [
|
||
{
|
||
"lang": "en",
|
||
"time": "2026-03-13T12:55:04.465Z",
|
||
"value": "Reported to Red Hat."
|
||
},
|
||
{
|
||
"lang": "en",
|
||
"time": "2026-05-27T10:35:47.805Z",
|
||
"value": "Made public."
|
||
}
|
||
],
|
||
"credits": [
|
||
{
|
||
"lang": "en",
|
||
"value": "Red Hat would like to thank Pavel Kohout (Aisle Research) for reporting this issue."
|
||
}
|
||
],
|
||
"providerMetadata": {
|
||
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
|
||
"shortName": "redhat",
|
||
"dateUpdated": "2026-11-05T19:31:57.749Z"
|
||
},
|
||
"x_generator": {
|
||
"engine": "cvelib 1.8.0"
|
||
}
|
||
},
|
||
"adp": [
|
||
{
|
||
"metrics": [
|
||
{
|
||
"other": {
|
||
"type": "ssvc",
|
||
"content": {
|
||
"timestamp": "2026-05-29T15:35:51.156381Z",
|
||
"id": "CVE-2026-2340",
|
||
"options": [
|
||
{
|
||
"Exploitation": "none"
|
||
},
|
||
{
|
||
"Automatable": "no"
|
||
},
|
||
{
|
||
"Technical Impact": "partial"
|
||
}
|
||
],
|
||
"role": "CISA Coordinator",
|
||
"version": "2.0.3"
|
||
}
|
||
}
|
||
}
|
||
],
|
||
"title": "CISA ADP Vulnrichment",
|
||
"providerMetadata": {
|
||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||
"shortName": "CISA-ADP",
|
||
"dateUpdated": "2026-05-29T15:35:58.406Z"
|
||
}
|
||
}
|
||
]
|
||
}
|
||
} |