What is the CVSS score of CVE-2026-3238?

CVE-2026-3238 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Samba are affected by CVE-2026-3238?

Samba file-sharing services on Alpine Linux are vulnerable to remote denial-of-service attacks that can cause service outages via network-level access without requiring authentication.

How to fix or mitigate CVE-2026-3238?

Within 24 hours: Inventory all Alpine Linux systems running Samba and assess production criticality and network exposure. Within 7 days: Deploy Samba version 4.23.8-r0 or later via Alpine Linux package updates to all affected systems, prioritizing production servers. Within 30 days: Validate patch application, monitor smbd service stability, and close vulnerability tracking records.

Samba CVE-2026-3238

EUVD-2026-35033 HIGH

NULL Pointer Dereference (CWE-476)

N/A vendor:alpine

GHSA-gpff-px68-36rh

Denial Of Service Null Pointer Dereference

7.5

CVSS 3.1 · Vendor: vendor:alpine

Severity by source

Vendor (vendor:alpine) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (vendor:alpine) · only source for this CVE.

CVSS VectorVendor: vendor:alpine

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Updated

Jun 08, 2026 - 09:28 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 08, 2026 - 09:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 08, 2026 - 09:22 vuln.today

cvss_changed

CVSS changed

Jun 08, 2026 - 09:22 NVD

7.5 (HIGH)

Analysis Generated

May 28, 2026 - 05:04 vuln.today

DescriptionCVE.org

Alpine Linux: samba fixed in 4.23.8-r0

AnalysisAI

Denial of service in Samba on Alpine Linux causes the smbd service to crash via a NULL pointer dereference triggered by remote unauthenticated network requests. Alpine Linux has issued a fix in samba 4.23.8-r0, and no public exploit identified at time of analysis. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires network reachability to a Samba smbd service listening on SMB ports (typically TCP 445, optionally 139) running an Alpine Linux samba package prior to 4.23.8-r0. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H indicates a high-severity, network-reachable, low-complexity DoS requiring no authentication or user interaction - making the attack trivially repeatable against any exposed smbd instance. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	The primary remediation on Alpine Linux is to upgrade the samba package to vendor-released patch 4.23.8-r0 or later via apk upgrade samba, which resolves the NULL pointer dereference. … Detailed patch versions, workarounds, and compensating controls in full report.