CVE-2026-58224 Samba: ctdb fails to do integrity checking of received packets

Medium 6.5 Published 14 Aug 2026 Updated 21 Oct 2026

Remote attackers on the CTDB network can cause denial of service or memory disclosure via malformed packets due to insufficient integrity checks.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2026-58224?

CVE-2026-58224 is a medium-severity denial of service vulnerability in Redhat Enterprise Linux, published on 14 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Weakness: CWE-353

Which versions are affected by CVE-2026-58224?

It affects 2 products.

Products include Redhat Enterprise Linux, Samba Samba.

How do I fix CVE-2026-58224?

Apply the vendor's patch.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2026-58224 being exploited?

There is no known exploitation of CVE-2026-58224 in the wild and no public exploit code.

All Redhat Enterprise Linux vulnerabilities

Sources

Also known as AZL-95888, CLSA-2026-1787133276, CLSA-2026-1788267403, CLSA-2026-1788338370, CLSA-2026-1788338379, CLSA-2026-1789553469 and 4 more.