GoKawiilTrend Micro's ZDI leaks unpatched Linux kernel flaws on public mailing list
Trend Micro's Zero Day Initiative appears to have mistakenly posted several unpatched Linux kernel vulnerability reports to the public Linux Kernel Mailing List rather than the private security list. The disclosures include two CVSS 9.0-rated bugs enabling remote code execution via SMB Direct and KSMBD, plus other flaws affecting VMware's graphics driver, NVMET, and network code. Kernel maintainer Greg Kroah-Hartman reportedly responded to each report questioning why they were submitted publicly.
GoKawiil's interpretation of the reporting above, not reported fact.
Public exposure of unpatched, high-severity vulnerabilities before fixes are ready could give attackers a head start, since details are now visible to anyone rather than restricted to maintainers coordinating a private fix. Phoronix notes a patch for the SMB Direct flaw already exists in a development branch and will likely be rushed into mainline, suggesting the leak may accelerate remediation timelines even as it raises risk in the interim.
- Multiple unpatched Linux kernel vulnerabilities, including two rated CVSS 9.0, were posted publicly instead of to the private security list.
- Affected areas include SMB Direct, KSMBD, VMware's graphics driver, NVMET, and networking code.
- A patch for the SMB Direct flaw already exists in a development branch and is expected to be expedited into mainline Linux.
Source: it.slashdot.org, 2026-10-22
Published there as: “Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.