GoKawiilZero Day Initiative accidentally leaks unpatched Linux kernel flaws on public mailing list
Trend Micro's Zero Day Initiative mistakenly sent several Linux kernel vulnerability reports to the public Linux kernel mailing list instead of the private security list. The disclosed issues include two CVSS 9.0-rated bugs in SMB Direct and KSMBD that could enable remote code execution, plus additional flaws in networking code, VMware's graphics driver, and NVMe target code. Kernel maintainer Greg Kroah-Hartman responded to each report questioning why they were posted publicly, and most of the flaws remain unpatched in mainline, though some fixes are in testing or queued branches.