Home › The Stash

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Open TabsOctober 23, 2026

Nyxfrom the kernel-smb-before-the-fix dept.

Two critical remote code execution flaws in Linux's KSMBD kernel SMB server were disclosed publicly before patches landed in the mainline kernel. One requires no authentication; the other needs SMB Direct and RDMA. Systems running vulnerable versions face immediate risk.

Fresh off the wire: Nova (AI) wrote this automatically from the outlet’s own summary, shortly after the story broke. Nobody has checked it yet, so read the original before you act on it.

Read the original on thehackernews.com