A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Red Hat Red Hat Enterprise Linux 10 unaffected —
Red Hat Red Hat Enterprise Linux 6 unknown —
Red Hat Red Hat Enterprise Linux 6 unknown —
Red Hat Red Hat Enterprise Linux 6 unknown —
Red Hat Red Hat Enterprise Linux 7 affected —
Red Hat Red Hat Enterprise Linux 8 unaffected —
Red Hat Red Hat Enterprise Linux 9 unaffected —
Red Hat Red Hat OpenShift Container Platform 4 unaffected —

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Redhat Subscribe
Enterprise Linux Subscribe
Openshift Subscribe
Advisories
Source ID Title
Debian DSA Debian DSA DSA-6401-1 samba security update
Ubuntu USN Ubuntu USN USN-8621-1 Samba vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://access.redhat.com/security/cve/CVE-2026-58224 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2502720 cve-icon cve-icon
https://bugzilla.samba.org/show_bug.cgi?id=16085 cve-icon cve-icon
https://www.samba.org/samba/security/CVE-2026-58224-advisory.html cve-icon cve-icon
History

Fri, 14 Aug 2026 15:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.
Title Samba: ctdb fails to do integrity checking of received packets
First Time appeared Redhat
Redhat enterprise Linux
Redhat openshift
Weaknesses CWE-353
CPEs cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat openshift
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-08-14T14:38:51.439Z

Reserved: 2026-06-29T18:20:36.913Z

Link: CVE-2026-58224

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-14T15:17:09.870

Modified: 2026-08-14T15:17:09.870

Link: CVE-2026-58224

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses