Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Summary: Trend Micro's Zero Day Initiative publicly disclosed two KSMBD remote code execution flaws rated 9.0, one of which (ZDI-CAN-33774) can be triggered before any network authentication on servers running KSMBD on port 445, while the other (ZDI-CAN-33549) requires SMB Direct and an RDMA-capable interface. As of Thursday neither flaw had a named fix in the mainline kernel or linux-next, and neither had a CVE identifier because the kernel project assigns those only after a stable-tree fix exists.
Bottom line: A pre-authentication 9.0 flaw on port 445 with no mainline fix and no CVE means patch tracking and vulnerability scanners have nothing to match on, and fixes to mainline typically take weeks to reach stable branches and distribution kernels after landing.

Read the original at The Hacker News ↗

Topics: Zero-Days & Exploits
Related: New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026
New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026
November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026