Two unpatched 9.0/10 RCE flaws hit Linux's in-kernel SMB server KSMBD
emax · x · 2026-10-23
KSMBD, Linux's built-in SMB file server, has two critical vulnerabilities rated 9.0/10: one allows unauthenticated attackers to execute code without logging in, and successful exploitation could yield kernel-level control. Worse, the flaws were made public before patches were ready, and no mainline fix exists yet.
Quoter @emax quipped about who put an SMB server in the kernel, noting SMB server vulns were among the first 0days he remembers growing up. Operators running KSMBD should pay close attention.
More from Safety
- Fortinet discloses multiple critical and high-severity flaws in FortiOS, FortiManager, FortiAnalyzer — cyb3rops · 2026-10-23
- LiteLLM 1.107.0 ships malware that runs on any Python start; pin 1.106.2 and rotate keys — AIFlow_ML · 2026-10-23
- Naval amplifies take: assume 70% of the Internet was already rooted, AI just exposed it — naval · 2026-10-23
- New paper with 25 coauthors examines feasibility of a hardwired pause on frontier AI training — wfithian · 2026-10-23
- Garrison Lovely publishes Obsolete: a trillion-dollar critique of the AI replacement race — GarrisonLovely · 2026-10-23
- Fired OpenAI safety researchers Balesni and Korbak give first interview on Machine Gods podcast — kevinroose · 2026-10-23