Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List
Trend Micro's Zero Day Initiative appears to have accidentally disclosed several unpatched Linux kernel vulnerabilities on the public LKML instead of the private security list, including two CVSS 9.0 flaws that could enable remote code execution through SMB Direct and KSMBD. "This seemingly was a mistake with Linux's second-in-command Greg Kroah-Hartman responding to each report asking about…
Trend Micro's Zero Day Initiative inadvertently disclosed a number of unpatched Linux kernel vulnerabilities on the public Linux Kernel Mailing List (LKML), rather than the private security list. This mistake was noted by Greg Kroah-Hartman, a key figure in the Linux kernel development community, who responded to queries about each submission to the public mailing list. The vulnerabilities include:
ZDI-CAN-33549, a critical (CVSS 9.0) remote code execution flaw through SMB Direct due to an integer underflow. A patch exists in a Git branch for Linux version 7.5 but will likely be urgently pushed to the mainline.
ZDI-CAN-33774 is another CVSS 9.0 rated vulnerability, a race condition in KSMBD that could result in remote code execution.
ZDI-CAN-33367 is a local privilege escalation issue in the network code related to skbuff skb_zerocopy. Linux kernel developers were previously alerted to the same issue by a different security report, and a patch is anticipated soon.
ZDI-CAN-34068, a VMware graphics driver bug leading to local privilege escalation via an out-of-bounds write.
ZDI-CAN-34076 is an information disclosure vulnerability stemming from an uninitialized resource in NVMET code.
Lastly, ZDI-CAN-32005, a TCP query stack buffer overflow in the search-domain TCP stack, also resulted in local privilege escalation. The mailing list saw this vulnerability posted a day prior to the rest.
Written by urgent.news from Slashdot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
