A flaw in Samba’s handling of NTFS-style reparse points allows authenticated users who have filesystem write permissions to create or delete reparse point metadata even when a share is configured as read‑only. The missing SMB‑layer access checks enable these users to alter file system behavior seen over SMB, for example by converting files into symbolic links or other reparse point types, potentially compromising integrity and facilitating further attacks.

The vulnerability affects multiple Red Hat distributions, including Red Hat Enterprise Linux 10, 6, 7, 8, 9, and Red Hat OpenShift Container Platform 4. All installations running the vulnerable Samba package are impacted, as no version‑specific patch information is provided.

The CVSS score of 7.1 indicates moderate to high severity. EPSS is not available, making exploitation probability uncertain, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is network‑based SMB traffic; an attacker must authenticate to a read‑only share and also have underlying filesystem write access to manipulate reparse point metadata. This flaw allows unauthorized modification of SMB‑visible file behavior and may assist in privilege escalation or lateral movement within the network.