RHEL samba-winbind pam_winbind home directory permission corruption (CVE-2026-15779)

Vulnerability Overview CVE ID: CVE-2026-15779 Product: samba-winbind Component: pam_winbind Description: In the module, when the setting is configured in , the module's function calls to modify the permissions of the target account's home directory. A vulnerability exists if the home directory is not a sensitive system directory. On RHEL, the default home directories for several system accounts (such as , , and ) are set to . Initiating an SSH session corrupts the attributes for these accounts, affecting systems that depend on and package management tools. The trigger conditions are not limited to explicit root invocation of ; non-root users can also trigger the vulnerability through delegation. Affected Versions Operating System: RHEL 9.0 to 9.3 Affected Versions: - RHEL 9.0.2 (RHEL-178291) - RHEL 9.0.2 (RHEL-169544) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - RHEL 9.0.2 (RHEL-168496) - R

Goal Reached Thanks to every supporter — we hit 100%!

RHEL samba-winbind pam_winbind home directory permission corruption (CVE-2026-15779)

More from this source