A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrator tickets.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-8766.json"