Back to all news
Security

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

The Hacker News·October 22, 2026·1 min read
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Two critical remote code execution flaws in Linux's KSMBD SMB server, rated 9.0 by Trend Micro's Zero Day Initiative, were disclosed on public mailing lists with no fix in the mainline kernel. One flaw, ZDI-CAN-33774, can be triggered before network authentication; the other, ZDI-CAN-33549, requires SMB Direct and RDMA-capable networking.

Read at The Hacker News
Daily crypto arcade

Read the news, then play it.

Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.

Open ChainshortsGet it on the Solana dApp Store