Ksmbd - GoKawiil

Trend Micro's ZDI leaks unpatched Linux kernel flaws on public mailing list

Trend Micro's Zero Day Initiative appears to have mistakenly posted several unpatched Linux kernel vulnerability reports to the public Linux Kernel Mailing List rather than the private security list. The disclosures include two CVSS 9.0-rated bugs enabling remote code execution via SMB Direct and KSMBD, plus other flaws affecting VMware's graphics driver, NVMET, and network code. Kernel maintainer Greg Kroah-Hartman reportedly responded to each report questioning why they were submitted publicly.

it.slashdot.org · 2026-10-22

Zero Day Initiative accidentally leaks unpatched Linux kernel flaws on public mailing list

Trend Micro's Zero Day Initiative mistakenly sent several Linux kernel vulnerability reports to the public Linux kernel mailing list instead of the private security list. The disclosed issues include two CVSS 9.0-rated bugs in SMB Direct and KSMBD that could enable remote code execution, plus additional flaws in networking code, VMware's graphics driver, and NVMe target code. Kernel maintainer Greg Kroah-Hartman responded to each report questioning why they were posted publicly, and most of the flaws remain unpatched in mainline, though some fixes are in testing or queued branches.

phoronix.com · 2026-10-22