CVE-2026-58224: Samba: ctdb fails to do integrity checking of received packets
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.
Other sources
CTDB fails to do a number of integrity checks on received packets. This result in denial of service (DoS) (due to crash or out-of memory) and possible limited disclosure of adjacent memory allocations.
— Red Hat
The CTDB protocol has bounds checking issues
— Debian
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.22.10+dfsg-0+deb13u2Fixed in 2:4.24.5+dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-58224?
The severity of CVE-2026-58224 is medium with a CVSS score of 6.5.
How do I fix CVE-2026-58224?
To fix CVE-2026-58224, it is recommended to update your Samba software to the latest version that addresses this vulnerability.
What is CVE-2026-58224 about?
CVE-2026-58224 describes a flaw in Samba's CTDB that allows insufficient integrity validation of received packets.
What systems are affected by CVE-2026-58224?
CVE-2026-58224 affects systems using Samba, specifically those utilizing the clustered database service (CTDB).
What type of attack is possible with CVE-2026-58224?
CVE-2026-58224 may allow an attacker to send malformed packets that disrupt the integrity of the Samba CTDB service.