CVE-2025-9640

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description An issue exists in Samba’s vfs streams xattr module where uninitialized heap memory can be written into alternate data streams. This can allow an authenticated user to read residual memory content, potentially including sensitive data, leading to information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.