CriticalZero-Day
Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List
Cyber Security News·Source published ·1 min read
What happened?
Several unpatched Linux-related security flaws were posted to public mailing lists in October, exposing technical details before fixes were ready. The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), include two critical flaws rated CVSS 9.0 that could let a remote attacker run code on systems using the Linux kernel’s KSMBD file server. Other reports describe local privilege-escalation and information-disclosure risks. The reports appeared on public lists, and Linux kernel maintainer Greg Kroah-Hartman questioned why some submissions were sent there without patches.
Key details
- ZDI-CAN-33367 involves skb_zerocopy networking code and may allow a local user to gain higher privileges.
- ZDI-CAN-32005 is a stack-buffer overflow in ConnMan’s handling of search-domain TCP queries; ConnMan is not a kernel component.
- Public disclosure before fixes creates pressure on maintainers and can give attackers useful information before updates reach users.
Affected
- KSMBD file server in Linux kernel is affected by two critical remote-code-execution flaws.
- Systems with KSMBD enabled and serving files are exposed to the two critical KSMBD flaws.
- ZDI-CAN-34076 affects the NVMe over Fabrics target code; information disclosure possible.
- ZDI-CAN-32005 affects ConnMan’s handling of search-domain TCP queries; not a kernel component.
Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.