CVE-2026-3238: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 10
A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.
AI Analysis
Technical Summary
CVE-2026-3238 is a high-severity vulnerability in the WINS server component of Samba when used as an Active Directory Domain Controller on Red Hat Enterprise Linux 10. The WINS protocol handlers do not properly validate certain incoming UDP packets, enabling an unauthenticated remote attacker to trigger a NULL pointer dereference. This causes the WINS service to crash, resulting in denial of service. The vulnerability is identified as CWE-476 (NULL Pointer Dereference). No vendor advisory indicates an available patch or workaround at this time.
Potential Impact
An attacker can remotely cause the WINS service to crash, leading to denial of service. There is no impact on confidentiality or integrity according to the CVSS vector. The attack requires no privileges or user interaction and can be performed over the network.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-3238 for current remediation guidance. Until a fix is available, consider disabling the WINS service if it is not required or restricting UDP access to the WINS service from untrusted networks to reduce exposure.
CVE-2026-3238: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 10
Description
A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.
CVSS v3.1
Score 7.5high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-3238 is a high-severity vulnerability in the WINS server component of Samba when used as an Active Directory Domain Controller on Red Hat Enterprise Linux 10. The WINS protocol handlers do not properly validate certain incoming UDP packets, enabling an unauthenticated remote attacker to trigger a NULL pointer dereference. This causes the WINS service to crash, resulting in denial of service. The vulnerability is identified as CWE-476 (NULL Pointer Dereference). No vendor advisory indicates an available patch or workaround at this time.
Potential Impact
An attacker can remotely cause the WINS service to crash, leading to denial of service. There is no impact on confidentiality or integrity according to the CVSS vector. The attack requires no privileges or user interaction and can be performed over the network.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-3238 for current remediation guidance. Until a fix is available, consider disabling the WINS service if it is not required or restricting UDP access to the WINS service from untrusted networks to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-02-26T00:47:38.208Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-3238","vendor":"Red Hat"}]
Threat ID: 6a267adde29bf47b50be981b
Added to database: 06/08/2026, 08:18:37 UTC
Last enriched: 07/15/2026, 09:07:31 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 89
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.