Published: 16 May 2023
Create Child permission should not allow full write to all attributes
Patches for this CVE have been commited to Samba master, to be consistent with the changes Microsoft have introduced, but the stable releases have not been patched. See comment #2 in upstream bug. Marking this as deferred until we get more information about this issue.