{"id":"CVE-2026-2340","summary":"Samba: vfs_worm does not block directory modification","details":"A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.","modified":"2026-11-08T02:47:21.742478145Z","published":"2026-05-27T12:09:32.601Z","related":["ALSA-2026:22644","ALSA-2026:22963","ALSA-2026:25049","SUSE-SU-2026:2071-1","SUSE-SU-2026:2072-1","SUSE-SU-2026:2073-1","SUSE-SU-2026:2074-1","SUSE-SU-2026:2076-1","SUSE-SU-2026:2108-1","SUSE-SU-2026:22045-1","SUSE-SU-2026:22080-1","SUSE-SU-2026:23003-1","SUSE-SU-2026:23129-1","SUSE-SU-2026:23152-1","openSUSE-SU-2026:10884-1","openSUSE-SU-2026:20905-1","openSUSE-SU-2026:21540-1"],"database_specific":{"cwe_ids":["CWE-280"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2340.json","unresolved_ranges":[{"extracted_events":[{"range":[{"fixed":"0:4.23.5-109.el10_2"},{"fixed":"0:4.21.3-114.el10_0.1"},{"fixed":"0:4.19.4-16.el8_10"},{"fixed":"0:4.19.4-16.el8_10"},{"fixed":"0:4.15.5-16.el8_6.1"},{"fixed":"0:4.15.5-16.el8_6.1"},{"fixed":"0:4.17.5-7.el8_8.1"},{"fixed":"0:4.17.5-7.el8_8.1"},{"fixed":"0:4.23.5-10.el9_8"},{"fixed":"0:4.23.5-10.el9_8"},{"fixed":"0:4.17.5-105.el9_2.5"},{"fixed":"0:4.19.4-105.el9_4.4"},{"fixed":"0:4.21.3-14.el9_6.1"},{"fixed":"412.86.202608241157-0"},{"fixed":"412.86.202609082051-0"},{"fixed":"413.92.202609080414-0"},{"fixed":"413.92.202609302032-0"},{"fixed":"414.92.202608172040-0"},{"fixed":"414.92.202609011250-0"},{"fixed":"415.92.202608180329-0"},{"fixed":"415.92.202609140326-0"},{"fixed":"416.94.202608150307-0"},{"fixed":"416.94.202609011112-0"},{"fixed":"417.94.202608250221-0"},{"fixed":"417.94.202609191027-0"},{"fixed":"418.94.202608142238-0"},{"fixed":"418.94.202609031320-0"},{"fixed":"4.19.9.6.202606241344-0"}],"source":"AFFECTED_FIELD","strategy":"InverseAffectedRanges"}]}],"cna_assigner":"redhat"},"references":[{"type":"WEB","url":"https://access.redhat.com/downloads/content/package-browser/"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22644"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:22963"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25049"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:25979"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28053"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28054"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28055"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28056"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:28057"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:29863"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:56786"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:56853"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:56911"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:57483"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:59831"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:60019"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:62409"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:62549"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65839"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65851"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:65907"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:67857"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:70586"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:77320"},{"type":"ADVISORY","url":"https://access.redhat.com/security/cve/CVE-2026-2340"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2340.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2340"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447318"},{"type":"REPORT","url":"https://bugzilla.samba.org/show_bug.cgi?id=15997"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/samba-team/samba","events":[{"introduced":"8fdd82c8b9ccc39f0b5f5d6cc22fa69f67c913a4"},{"fixed":"0abfaceda097f447ac0284db9f639dabc5070595"},{"introduced":"942092eadf52c46f9bd913525015d53cb1cc8fb1"},{"fixed":"11bc23b9182aca30456c5785f1e63d405899434d"},{"introduced":"86f97e92d182c19435a8b60221a4ca383da77111"},{"fixed":"d125b56c342341d07a6ff03674ceae982fc0539e"}],"database_specific":{"extracted_events":[{"cpe":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","range":[{"introduced":"4.20.0"},{"fixed":"4.22.10"}],"source":"CPE_RANGE"},{"source":"CPE_RANGE","cpe":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","range":[{"introduced":"4.23.0"},{"fixed":"4.23.8"}]},{"source":"CPE_RANGE","cpe":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","range":[{"introduced":"4.24.0"},{"fixed":"4.24.3"}]}]}}],"versions":["samba-4.24.2","samba-4.23.7","samba-4.24.1","samba-4.24.0","samba-4.23.6","samba-4.23.5","samba-4.23.4","samba-4.23.3","samba-4.23.2","samba-4.23.1","samba-4.23.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-2340.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"}]}