CVE-2025-0620

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.21.6

Description The issue concerns a problem with SMB session re-authentication when using Kerberos authentication with SMB. Specifically, smbd does not pick up group membership changes when re-authenticating an expired SMB session. This means that changes in group membership are not reflected after a session re-authentication, potentially leading to unauthorized access or other security issues.

Recommendations For versions prior to 4.21.6, update to version 4.21.6 to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources that rely on accurate group membership until the update can be applied.