#zdi
-
Two CVSS 9.0 KSMBD RCE Flaws Go Public on Mailing Lists Before Any Kernel Fix
KSMBD, the Linux kernel's built-in SMB server, is exposed to two remote-code-execution flaws rated 9.0, with no mainline fix yet — and the reports landed on public mailing lists.
-
Linux Kernel Vulnerabilities Accidentally Dumped Onto Public LKML
Zero Day Initiative researchers mistakenly sent reports on several unpatched kernel flaws to the public mailing list instead of the private security one. Some of the bugs carry a CVSS score of 9.0.