Trend Micro Zero Day Initiative sent detailed vulnerability reports concerning the Linux kernel's built-in KSMBD SMB server to public mailing lists, exposing critical technical information ahead of available patches.
Two of the disclosed issues in KSMBD received CVSS scores of 9.0, indicating high potential for remote code execution. One flaw arises from improper handling of concurrent requests that creates a race condition. The second stems from an incorrect size calculation inside the SMB Direct implementation and requires a specific configuration that includes RDMA hardware together with a writable network share.
Both reports, including root-cause analysis and reproduction data, remain preserved in the mailing-list archives. Additional findings described in the same messages cover privilege-escalation vectors and information leaks affecting other kernel components.
It is still unclear whether the reports reached the open lists by accident or through a configuration error. The KSMBD maintainer has already committed a fix for ZDI-CAN-33774 to the project's Git repository, although the change has not yet been integrated into every major Linux distribution kernel.
