Two Critical CVSS 9.0 Linux KSMBD RCE Flaws Disclosed Before Kernel Fixes

Two critical remote code execution vulnerabilities with a CVSS score of 9.0 have been disclosed in the Linux KSMBD component on public mailing lists. One of these flaws requires no authentication, and as of the disclosure, neither vulnerability has been addressed with a mainline kernel fix. This announcement highlights ongoing security risks in Linux kernel components prior to patch availability.

Originally published by gnews