Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it. https://nvd.nist.gov/vuln/detail/CVE-2022-32743