GoKawiilTrend Micro's ZDI leaks unpatched Linux kernel flaws on public mailing list
Trend Micro's Zero Day Initiative appears to have mistakenly posted several unpatched Linux kernel vulnerability reports to the public Linux Kernel Mailing List rather than the private security list. The disclosures include two CVSS 9.0-rated bugs enabling remote code execution via SMB Direct and KSMBD, plus other flaws affecting VMware's graphics driver, NVMET, and network code. Kernel maintainer Greg Kroah-Hartman reportedly responded to each report questioning why they were submitted publicly.