Critical Samba Vulnerabilities Addressed in SUSE Linux Micro 6.2 Update

Critical Samba Vulnerabilities Addressed in SUSE Linux Micro 6.2 Update

First seen 27 Nov 2025, 21:33 UTC Linuxsecurity 42.1

Article Content

Browse articles
ThreatCluster

SUSE Linux Micro 6.2 has released a critical update for Samba addressing two vulnerabilities: CVE-2025-10230, a command injection issue via the WINS server hook script, and CVE-2025-9640, which involves uninitialized memory disclosure. The update also includes changes to the samba-gpupdate requirements and disables timeouts for smb.service.