The Hacker News reports that one flaw needs no authentication and the other requires SMB Direct. Neither had a named fix in the main Linux kernel as of October 22, leaving administrators to identify exposed deployments.
Two publicly disclosed flaws in Linux’s KSMBD file server could allow an attacker to run code remotely, according to The Hacker News’s October 22 report on findings from Trend Micro’s Zero Day Initiative. The initiative assigned both flaws a CVSS severity score of 9.0. Neither had a named fix in the mainline Linux kernel—the main development version—or linux-next, the development tree that feeds it.
KSMBD handles SMB network file-sharing inside the Linux kernel, the core of the operating system. These risks concern servers running KSMBD, not Linux installations generally. The two flaws also have different exposure requirements: one can be triggered without logging in, while the other requires a particular file-sharing setup.
The Hacker News describes the following conditions for the two flaws. Both scores come from the Zero Day Initiative.
| Vulnerability | CVSS score | Required conditions |
|---|---|---|
ZDI-CAN-33774 | 9.0 | KSMBD running on network port 445; no authentication needed to trigger the flaw. |
ZDI-CAN-33549 | 9.0 | A network interface supporting remote direct memory access (RDMA), a writable KSMBD shared folder and a client negotiating SMB Direct. RDMA can be provided by hardware or the rxe software driver. |
The W27 keeps the Galaxy Z Fold 8 Ultra’s core hardware, with dark-red or dark-blue finishes, golden accents and 16GB of working memory in both storage versions.
2 min
For ZDI-CAN-33774, the report describes a timing error that can send data to the wrong protocol handler, causing KSMBD to read beyond a memory buffer. It also describes a path to writing beyond the buffer once an attacker has access to a shared folder. The lack of an authentication requirement applies to triggering the flaw; the reported write path has that additional access condition.
ZDI-CAN-33549 affects SMB Direct, an SMB transport that uses RDMA. The report describes an integer underflow—a size calculation that wraps to an unintended value—which can cause a memory copy to run beyond an allocated buffer.
Administrators can check for KSMBD activity with systemctl status ksmbd or lsmod | grep ksmbd, the report says. These checks identify the service or loaded module; the SMB Direct flaw also requires the network and shared-folder conditions listed above.
Red Hat Enterprise Linux does not include KSMBD by default, according to Red Hat support documentation cited by The Hacker News. The relevant question for administrators is whether their particular server runs the component.
Both flaws still awaited named fixes in mainline or linux-next as of October 22. The Hacker News says mainline fixes typically take weeks to reach stable kernel branches and then the kernels shipped by Linux distributions, making those later updates another step before administrators receive distribution-provided patches.
The satellite operator expects access to more than twice OneWeb’s current bandwidth in return for spending in 2027–2034, with initial IRIS² services expected from 2030.
3 min
The black, gold and green edition follows September’s sold-out preorders. Nintendo’s replenished launch-day stock also quickly sold out.
1 min
