Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Ubuntu 20.04 LTS: Samba Important Code Exec Risk USN-7826-2 CVE-2025-10230

ubuntu
Calendar Grey October 20, 2025
Dist Ubuntu Esm H88
Critical Samba updates resolve security threats on multiple Ubuntu versions. Immediate action is required for safety.
Several security issues were fixed in Samba.

Summary

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Samba. Software Description: - samba: SMB/CIFS file, print, and login server for Unix Details: USN-7826-1 fixed vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Andrew Walker discovered that Samba incorrectly initialized memory in the vfs_streams_xattr module. An authenticated attacker could possibly use this issue to obtain sensitive information. (CVE-2025-9640) Igor Morgenstern discovered that Samba incorrectly handled names passed to the WINS hook program. An attacker could possibly use this issue to execute arbitrary code. (CVE-2025-10230)

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS samba 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3 Available with Ubuntu Pro Ubuntu 16.04 LTS samba 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4 Available with Ubuntu Pro Ubuntu 14.04 LTS samba 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7826-2

https://ubuntu.com/security/notices/USN-7826-1

CVE-2025-10230, CVE-2025-9640

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7826-2

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here