Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
↗Two CVSS 9.0 remote code execution flaws in the Linux kernel's built-in KSMBD SMB server (ZDI-CAN-33774 and ZDI-CAN-33549) were disclosed publicly on mailing lists before any mainline kernel fix exists, with one exploitable pre-authentication.
Oct 23, 20261%