Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero Day Initiative, with no fix yet in the mainline kernel. One of them, ZDI-CAN-33774, can be triggered before any network authentication. The other, ZDI-CAN-33549, requires the SMB Direct... Weiterlesen: Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists …
Intelligence View
⚡ tsecurity.de Intelligence
Two CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
Linux servers running KSMBD, the kernel's built-in SMB server, are exposed to two publicly reported remote code execution flaws rated 9.0 by Trend Micro's Zero…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
OpenVAS ile halka açık erişilebilir hizmetler, keskin WAF kuralları, kısa yama pencereler.
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Powered by tsecurity.de
tsecurity.de Hub
İlgili Story Cluster & Kaynaklar (vector AI)
14 Kaynaklar
Security: Denial of Service in ags (Fedora)
13 diğer kaynaklar
PPro-Linuxvor 2 Std.Security: Denial of Service in mingw-qt6-qt5compat (Fedora) VVulDB Updatesvor 3 Std.CVE-2026-121386 | FreeRDP up to 3.32.1 WinPR denial of service (Nessus ID 375599) PPro-Linux Securityvor 2 Std.Denial of Service in mingw-qt6-qt5compat (Fedora) PPro-Linux Securityvor 2 Std.Denial of Service in ags (Fedora) VVulDB Updatesvor 6 Std.CVE-2022-48492 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51188) VVulDB Updatesvor 6 Std.CVE-2022-48493 | Huawei EMUI/Magic UI Configuration denial of service (EUVD-2022-51189)
+7
13 Kaynaklar
CVE-2026-99257 | Linux Kernel up to 7.2.12 Gpio Shared null pointer dereference (Nessus ID 375602)
12 diğer kaynaklar
VVulDB Updatesvor 2 Std.CVE-2026-99255 | Linux Kernel up to 7.2.13 io-wq io_uring_cancel_generic cur_work race condition (Nessus ID 375597) VVulDB Updatesvor 2 Std.CVE-2026-99260 | Linux Kernel up to 7.2.12 ntfs ntfs_new_attr_flags behavioral workflow (Nessus ID 375596) VVulDB Updatesvor 2 Std.CVE-2026-99244 | Linux Kernel up to 7.3.0 pid_namespace zap_pid_ns_processes race condition (Nessus ID 375592) VVulDB Updatesvor 8 Std.CVE-2024-36978 | Linux Kernel up to 6.10-rc2 sch_multiq multiq_tune out-of-bounds write (affc18fdc694 / Nessus ID 207802) VVulDB Updatesvor 6 Std.CVE-2026-64312 | Linux Kernel up to 7.1.3 pcrypt pcrypt_aead_done improper synchronization (Nessus ID 375470) VVulDB Updatesvor 6 Std.CVE-2026-74684 | Linux Kernel up to 6.18.44/7.1.8 tap tap_get_user_xdp null pointer dereference (Nessus ID 375470)
+6
10 Kaynaklar
PikaPods: Host Any Open-Source Apps Without a VPS Server
9 diğer kaynaklar
ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think HHelp Net Securityvor 1 Std.Ghostunnel: Open-source TLS proxy with mutual authentication ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think ZZDNETvor 3 Std.Filing bugs for open-source apps is a huge help for developers – and easier than you think DDEV Communityvor 3 Std.How I Vet an Open-Source Dependency Before Betting On It
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/tr/4291022/it-guevenlik-haberleri/two-cvss-90-linux-ksmbd-rce-flaws-disclosed-on-public-mailing-lists-before-kernel-fixes/