importantSYS.SOURCE: The Hacker News• 2026-10-22T22:31:53+05:30

Critical CVSS 9.0 Remote Code Execution Vulnerabilities in Linux KSMBD Exposed

#vulnerability #linux #rce #smb #kernel

Linux servers using KSMBD are vulnerable to two remote code execution flaws (CVSS 9.0) with no mainline kernel fixes available. One vulnerability can be exploited without authentication, while the other requires SMB Direct transport and RDMA-capable networks.

Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel.

One of them, ZDI-CAN-33774, can be triggered before any network authentication. The other, ZDI-CAN-33549, requires the SMB Direct transport and an RDMA-capable network

Read original article

*** END OF TRANSMISSION ***

> THE BROWSER COMPANY RETIRES ARC BROWSER, SHIFTS FOCUS TO AI-FIRST DIA BROWSER > STRATEGIC GO-TO-MARKET APPROACHES KEY TO SUSTAINABLE STARTUP GROWTH, TECH LEADERS ADVISE > EXPLOITING WEAKNESSES IN EMUDHRA'S 1FA OTP AUTHENTICATION MECHANISM > 1PASSWORD INTRODUCES AGENT AUTHENTICATION SYSTEM WITHOUT EXPOSING PASSWORDS > ARISTA ISSUES CRITICAL ADVISORY FOR ZERO-DAY SQL INJECTION IN VELOCLOUD ORCHESTRATOR > CANVA UNVEILS AI-POWERED IMAGE GENERATION MODEL 'CRAFT' TO ENHANCE DESIGN CAPABILITIES > OPENAI LAUNCHES DECISIONS API TO COMPETE IN RAPID DECISION-MAKING AI MARKET > HEDRA: A 3D OPEN-WORLD GAME DEVELOPED FROM SCRATCH DURING HIGH SCHOOL > MICROSOFT AI DEMONSTRATES SUPERIOR DIAGNOSTIC ACCURACY IN COMPLEX MEDICAL CASES > CROSS-PLATFORM XR WORLD CREATION AND EXPLORATION TOOL> THE BROWSER COMPANY RETIRES ARC BROWSER, SHIFTS FOCUS TO AI-FIRST DIA BROWSER > STRATEGIC GO-TO-MARKET APPROACHES KEY TO SUSTAINABLE STARTUP GROWTH, TECH LEADERS ADVISE > EXPLOITING WEAKNESSES IN EMUDHRA'S 1FA OTP AUTHENTICATION MECHANISM > 1PASSWORD INTRODUCES AGENT AUTHENTICATION SYSTEM WITHOUT EXPOSING PASSWORDS > ARISTA ISSUES CRITICAL ADVISORY FOR ZERO-DAY SQL INJECTION IN VELOCLOUD ORCHESTRATOR > CANVA UNVEILS AI-POWERED IMAGE GENERATION MODEL 'CRAFT' TO ENHANCE DESIGN CAPABILITIES > OPENAI LAUNCHES DECISIONS API TO COMPETE IN RAPID DECISION-MAKING AI MARKET > HEDRA: A 3D OPEN-WORLD GAME DEVELOPED FROM SCRATCH DURING HIGH SCHOOL > MICROSOFT AI DEMONSTRATES SUPERIOR DIAGNOSTIC ACCURACY IN COMPLEX MEDICAL CASES > CROSS-PLATFORM XR WORLD CREATION AND EXPLORATION TOOL