News
cybersecurity ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More - The Hacker News cybersecurity Arista patches new VeloCloud Orchestrator zero-day exploited in attacks - BleepingComputer cybersecurity Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes - The Hacker News threat-intel Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year - GBHackers cybersecurity PHP2Shell: 24 hours in, 99.3% of Measurable PHP Instances Are Still Unpatched - OX Security cybersecurity Hackers got a four-day head start on epic PHP2Shell vulnerability - Ars Technica Security cybersecurity Node.js Brotli Decoder Out-of-Bounds Write (RCE) – CVE-2026-111497 - OX Security cybersecurity Hacker Conversations: Corey Thuen and the Evil Bit - SecurityWeek cybersecurity Machine speed attacks require machine speed detection and response - BleepingComputer cybersecurity INTERPOL Arrests 1,462 Suspects, Disrupts 10,909 Cybercrime Networks in Global Crackdown - The Hacker News threat-intel Cybercriminals Used Claude and Grok to Launch Automated Attacks Against Banks - GBHackers cybersecurity Amazon says PHP2Shell exploitation began 4 days before patches - BleepingComputer threat-intel ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors - Wiz Research threat-intel K0T Hackers Target FortiGate, FortiWeb and Palo Alto GlobalProtect in Credential Theft Campaign - GBHackers cybersecurity Signal Vulnerability Lets Malicious Callers Block Hang-Ups - SecurityWeek
1 / 15
All news ›
Cybersecurity

Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

The Hacker News ·

Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. The other, ZDI-CAN-33549, requires the SMB Direct transport and an RDMA-capable network

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.