Vulnerability · Published Aug 14, 2026 · Assigned by redhat
CVE-2026-58224Samba: ctdb fails to do integrity checking of received packets
Medium 6.5
In plain English
A medium-severity security flaw in Red Hat Ceph Storage 9.2 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | samba | no fix listed | DEBIAN-CVE-2026-58224 |
| Debian:13 | samba | 2:4.22.10+dfsg-0+deb13u2 | DEBIAN-CVE-2026-58224 |
| Debian:14 | samba | 2:4.24.5+dfsg-1 | DEBIAN-CVE-2026-58224 |
| Ubuntu:22.04:LTS | samba | 2:4.15.13+dfsg-0ubuntu1.13 | UBUNTU-CVE-2026-58224 |
| Ubuntu:24.04:LTS | samba | 2:4.19.5+dfsg-4ubuntu9.7 | UBUNTU-CVE-2026-58224 |
| Ubuntu:26.04:LTS | samba | 2:4.23.6+dfsg-1ubuntu2.2 | UBUNTU-CVE-2026-58224 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Ceph Storage 9.2 | see references |
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat OpenShift Container Platform 5 | see references |
Weakness: CWE-353 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- RHSA-2026:86618 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2026-58224 vdb-entry, x_refsource_REDHAT
- RHBZ#2502720 issue-tracking, x_refsource_REDHAT
- https://bugzilla.samba.org/show_bug.cgi?id=16085
- https://www.samba.org/samba/security/CVE-2026-58224-advisory.html