CVE-2026-58224
Samba: ctdb fails to do integrity checking of received packets
CVSS Score
6.5
EPSS Score
0.3%
EPSS Percentile
28th
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.
| CWE | CWE-353 |
| Vendor | red hat |
| Product | red hat ceph storage 9.2 |
| Published | Aug 14, 2026 |
| Last Updated | Nov 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for red hat red hat ceph storage 9.2
Be the first to know when new medium vulnerabilities affecting red hat red hat ceph storage 9.2 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Red Hat / Red Hat Ceph Storage 9.2
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 6
All versions affected Red Hat / Red Hat Enterprise Linux 6
All versions affected Red Hat / Red Hat Enterprise Linux 6
All versions affected Red Hat / Red Hat Enterprise Linux 7
All versions affected Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected Red Hat / Red Hat OpenShift Container Platform 4
All versions affected Red Hat / Red Hat OpenShift Container Platform 5
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2026:86618 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-58224 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2502720 bugzilla.samba.org: https://bugzilla.samba.org/show_bug.cgi?id=16085 samba.org: https://www.samba.org/samba/security/CVE-2026-58224-advisory.html
Credits
Red Hat would like to thank Andrew Tridgell, Martin Schwenke (Samba Team), and Tristan Madani (Talence Security) for reporting this issue.