Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Summary
Two critical remote code execution vulnerabilities have been disclosed in Linux's KSMBD, the kernel's built-in SMB server. Both flaws have been publicly reported and rated with a CVSS score of 9.0, with no immediate fix available in the mainline kernel. One vulnerability can be exploited before network authentication, while the other requires the SMB Direct transport with RDMA capability.
IFF Assessment
The disclosure of critical remote code execution vulnerabilities in a core Linux component poses a significant threat to defenders, allowing for potential system compromise.
Severity
The vulnerabilities are rated 9.0, indicating a critical severity that allows for remote code execution, which can lead to system compromise. One flaw can be exploited pre-authentication, increasing its exploitability.
Defender Context
Defenders should be aware of these KSMBD vulnerabilities and prioritize patching or mitigating systems running the affected Linux kernel versions as soon as fixes become available. Monitoring network traffic for suspicious SMBDirect or RDMA-related activity could help detect exploitation attempts.