REDHAT-BUG-2447318: Medium severity Samba Samba vfs_worm vulnerability
Published Mar 13, 2026
·Updated
Samba: vfsworm does not block directory modification
Affected Software
1 affected component
Samba Samba vfs_worm
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove 'vfs_worm' from the 'vfs objects' list in smb.conf for any affected shares or otherwise disable the vfs_worm module until a corrected version is available, to prevent reliance on its WORM behavior.
Samba (vfs_worm) vfs objects = remove vfs_worm / disable vfs_worm
Event History
Mar 13, 2026
Data Sourced
via Red Hat·01:05 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2447318?
The severity of REDHAT-BUG-2447318 is medium with a score of 4.
2
What does REDHAT-BUG-2447318 affect?
REDHAT-BUG-2447318 affects the Samba vfs_worm module.
3
What issue does REDHAT-BUG-2447318 introduce?
REDHAT-BUG-2447318 introduces a vulnerability where vfs_worm does not block directory modification.
4
How do I fix REDHAT-BUG-2447318?
To fix REDHAT-BUG-2447318, update to the latest version of Samba that addresses this vulnerability.
5
When was REDHAT-BUG-2447318 published?
REDHAT-BUG-2447318 was published on March 13, 2026.