VDB
RHSA-2026:57483
RHSA-2026:57483
PUBLISHED
CVSS 7.800000190734863 HIGH
A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.
Risk Scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhcos-ppc64le-418.94.202608142238-0 as a component of Red Hat OpenShift Container Platform 4.18 | 418.94.202608142238-0 |
| Red Hat | rhcos-x86_64-418.94.202608142238-0 as a component of Red Hat OpenShift Container Platform 4.18 | 418.94.202608142238-0 |
| Red Hat | rhcos-aarch64-418.94.202608142238-0 as a component of Red Hat OpenShift Container Platform 4.18 | 418.94.202608142238-0 |
| Red Hat | rhcos-s390x-418.94.202608142238-0 as a component of Red Hat OpenShift Container Platform 4.18 | 418.94.202608142238-0 |
Timeline
- Aug 26, 2026 CVE Published
- Aug 27, 2026 CVE Updated
- Aug 27, 2026 Distribution Patch
- Aug 27, 2026 Distribution Patch
- Aug 27, 2026 Security Advisory
- Aug 27, 2026 Security Advisory
- Aug 27, 2026 Security Advisory
- Aug 27, 2026 Security Advisory
- Aug 27, 2026 Security Advisory
- Aug 27, 2026 Security Advisory
- Aug 27, 2026 Security Advisory
- Aug 27, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:57483 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2467450 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2477915 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2479762 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2496556 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2496581 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2507402 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57483.json advisory
- https://access.redhat.com/security/cve/CVE-2026-1933 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-1933 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-1933 advisory
- https://bugzilla.samba.org/show_bug.cgi?id=15992 issue
- https://access.redhat.com/security/cve/CVE-2026-2340 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-2340 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-2340 advisory
- https://bugzilla.samba.org/show_bug.cgi?id=15997 issue
- https://access.redhat.com/security/cve/CVE-2026-3012 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-3012 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-3012 advisory
- https://bugzilla.samba.org/show_bug.cgi?id=16003 issue
…and 87 more