CVE-2026-15779 Details

A vulnerability exists in Samba's pam_winbind module, specifically in versions 4.19.x and 4.23.x, when the mkhomedir option is enabled. The module improperly changes the ownership of user home directories without checking if the path is a critical system directory, such as the root directory (/). This flaw can be exploited by non-root users with limited sudo privileges to alter the ownership of the root directory, leading to significant disruptions in system operations that rely on proper file ownership, such as SSH, sudo, and package management. While the ownership change does not allow writing to the root directory due to its default permissions, the incident still causes considerable operational issues.

Users can disable the mkhomedir option in the pam_winbind.conf file to prevent this vulnerability. For systems already affected, restoring the original ownership of the root directory will require manual intervention.