Two CVSS 9.0 Linux KSMBD RCE flaws disclosed before kernel fixes

Trend Micro's Zero Day Initiative has disclosed two remote code execution flaws in KSMBD, the SMB server built into the Linux kernel, both rated 9.0. ZDI-CAN-33774 can be triggered before network authentication, while ZDI-CAN-33549 requires SMB Direct and an RDMA-capable network. No fix is available in the mainline kernel yet.

• Both flaws are rated 9.0 on the CVSS scale
• ZDI-CAN-33774 triggers before network authentication
• ZDI-CAN-33549 requires SMB Direct and RDMA networking
• No fixes are available in the mainline Linux kernel yet