PT-2025-23682 · Samba+3 · Samba+3

Ralph Boehme · Published 2025-06-03 · Updated 2025-11-18 · CVE-2025-0620

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.21.6

Description The issue concerns a problem with SMB session re-authentication when using Kerberos authentication with SMB. Specifically, smbd does not pick up group membership changes when re-authenticating an expired SMB session. This means that changes in group membership are not reflected after a session re-authentication, potentially leading to unauthorized access or other security issues.

Recommendations For versions prior to 4.21.6, update to version 4.21.6 to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources that rely on accurate group membership until the update can be applied.

Fix

Improper Authentication

Files Accessible to External Parties

Weakness Enumeration

CWE-287

CWE-552

Related Identifiers

ALT-PU-2025-10509

BDU:2025-09920

CVE-2025-0620

OPENSUSE-SU-2025:15296-1

SUSE-SU-2025:02230-1

SUSE-SU-2025_02230-1

USN-7564-1

Affected Products

Alt Linux

Samba

Suse

Ubuntu

References · 34

• https://osv.dev/vulnerability/CVE-2025-0620 · Vendor Advisory
• https://samba.org/samba/security/CVE-2025-0620.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0620 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15296-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09920 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-0620 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-0620 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-0620 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7564-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-0620 · Security Note
• https://ubuntu.com/security/CVE-2025-0620 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-0620 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7564-1 · Vendor Advisory