[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

2 clusters · 5 sources · 2 days · First seen · Last updated

Linux kernel ksmbd security vulnerabilities

Overview

Critical security vulnerabilities were identified in the Linux kernel’s integrated SMB server, ksmbd. These flaws, including ZDI-CAN-33774 and ZDI-CAN-33549, were assigned CVSS scores of 9.0 by Trend Micro’s Zero Day Initiative (ZDI). The vulnerabilities could allow for unauthenticated remote code execution or unauthorized data access via buffer overflows and integer underflows.

Following the initial discovery, Trend Micro’s ZDI accidentally leaked the details of at least six unpatched, high-severity vulnerabilities by sending reports to the public Linux Kernel Mailing List (LKML) instead of a private security list. This exposure caused significant frustration for Linux kernel maintainer Greg Kroah-Hartman. While the leak increased the risk for attackers, the immediate threat is primarily concentrated on systems such as NAS and home servers using the ksmbd module with port 445 exposed to untrusted networks.

Entities

Linux Kernel Mailing List · Greg Kroah-Hartman · Trend Micro · Zero Day Initiative · Linux Foundation

Timeline

  1. [TECHNOLOGY] 2 sources
    Trend Micro ZDI accidentally leaks unpatched Linux kernel vulnerabilities

    Trend Micro's Zero Day Initiative accidentally leaked multiple unpatched Linux kernel vulnerabilities with CVSS scores of 9.0+ to a public mailing list, risking remote code execution on certain servers.

  2. [TECHNOLOGY] 2 sources
    Linux kernel ksmbd SMB server faces critical vulnerabilities

    Critical vulnerabilities in the Linux kernel's ksmbd SMB server allow for unauthenticated remote code execution and memory leaks, according to Trend Micro's ZDI.

Sources

it-boltwise.de · it-daily.net · security-insider.de · supermoney.com · tuttoperinternet.it