CVE-2021-44142

CVE-2021-44142 is a critical out-of-bounds read and write vulnerability in the Samba vfs_fruit module, affecting Samba versions prior to 4.13.17, 4.14.12, and 4.15.5, as well as products from Canonical, Debian, Fedora, Red Hat, and Synology. A remote attacker with write access to extended file attributes can exploit this flaw to execute arbitrary code with root privileges. The vulnerability carries a CVSS score of 8.8 (High) due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation.