CVE-2026-2340: Improper Handling of Insufficient Permissions or Privileges in Red Hat Red Hat Enterprise Linux 10
Description
CVE-2026-2340 is a medium-severity vulnerability affecting the Samba vfs_worm module in Red Hat OpenShift Container Platform versions 4.12.0 through 4.12.98. The issue involves improper handling of directory modification permissions, where the vfs_worm module does not block directory modification as intended. Red Hat has released official patches and advises users to upgrade to the latest versions to mitigate this and other related vulnerabilities.
CVSS v3.1
Score 6.5medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-2340 is a security vulnerability in the Samba vfs_worm module used in Red Hat OpenShift Container Platform 4.12.x. The vfs_worm module fails to block directory modification operations, which constitutes improper handling of insufficient permissions or privileges. This vulnerability has a CVSS 3.1 base score of 6.5 (medium severity) with an impact primarily on integrity. Red Hat has issued official patches and upgrade instructions to address this issue as part of multiple security fixes in related releases.
Potential Impact
The vulnerability allows unauthorized modification of directories protected by the vfs_worm module, potentially leading to integrity violations. There is no direct impact on confidentiality or availability reported. The CVSS score of 6.5 reflects a medium severity level with network attack vector, low attack complexity, and privileges required. No known exploits in the wild have been reported.
Mitigation Recommendations
Red Hat provides official patches for this vulnerability as detailed in multiple Red Hat Security Advisories (e.g., RHSA-2026:57483). Users of affected OpenShift Container Platform versions (>=4.12.0 <=4.12.98) should upgrade to the latest patched releases following Red Hat's upgrade instructions. No additional mitigation actions are required beyond applying the official updates.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-m6w2-p258-gxqp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-2340"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- State
- PUBLISHED
Patch Information
- https://access.redhat.com/errata/RHSA-2026:57483
- https://access.redhat.com/errata/RHSA-2026:56911
- https://access.redhat.com/errata/RHSA-2026:56853
- https://access.redhat.com/errata/RHSA-2026:56786
- https://access.redhat.com/errata/RHSA-2026:29863
- https://access.redhat.com/errata/RHSA-2026:28057
- https://access.redhat.com/errata/RHSA-2026:28056
- https://access.redhat.com/errata/RHSA-2026:28055
- https://access.redhat.com/errata/RHSA-2026:28054
- https://access.redhat.com/errata/RHSA-2026:28053
- https://access.redhat.com/errata/RHSA-2026:25979
- https://access.redhat.com/errata/RHSA-2026:25049
Threat ID: 6a95a101acd9273b4947e945
Added to database: 08/31/2026, 15:42:57 UTC
Last enriched: 10/14/2026, 23:15:13 UTC
Last updated: 10/16/2026, 06:48:16 UTC
Views: 59
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.