medium4.9
CVE-2025-0620
A flaw was found in Samba.
Impact
A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samba | Samba | from 4.21.0 before 4.21.6 from 4.22.0 before 4.22.2 |