Science & Tech · Cybersecurity · 2 hrs ago
Six unpatched Linux kernel flaws were accidentally disclosed
Trend Micro’s Zero Day Initiative accidentally shared details of six Linux kernel flaws on a public mailing list.
The flaws were still unpatched when their details were posted.
The Linux kernel is the core software that manages a computer’s hardware and system resources.
The disclosure made information about the flaws publicly available before they had been fixed.
The posting drew angry responses from people on the mailing list.
The available details do not say whether fixes have since been released or what happens next.
Trend Micro’s Zero Day Initiative accidentally disclosed details of six unpatched Linux kernel flaws on public mailing lists.
Two of the flaws affect KSMBD, the kernel’s built-in SMB server, and are rated 9.0 for remote code execution.
One KSMBD flaw can be triggered without authentication, while the other requires SMB Direct and an RDMA-capable network interface.
The reports did not include patches, and the two KSMBD flaws had no named fix in the mainline kernel or linux-next as of Thursday.
Kernel maintainer Greg Kroah-Hartman criticized the public submissions and the lack of patches.
- Who
- Trend Micro’s Zero Day Initiative disclosed the flaws; Linux kernel maintainer Greg Kroah-Hartman responded to some reports.
- What
- Details of six unpatched Linux kernel flaws were posted to a public mailing list.
- When
- The reports were discussed in articles published on October 22, 2026; the exact date of the mailing-list posts is not stated.
- Where
- Public Linux kernel developer mailing lists.
- Why
- Not stated
This story does not have two clearly opposing sides.
ZDI sent vulnerability reports to public mailing lists without attaching patches.
Greg Kroah-Hartman replied to three of the five kernel reports.
The Hacker News and Neowin published articles about the disclosures.
- KSMBD flaws
- ZDI-CAN-33549 and ZDI-CAN-33774
- KSMBD flaw severity
- Both rated CVSS 9.0
- ZDI-CAN-33774
- Remote code execution; no authentication required
- ZDI-CAN-33549
- Remote code execution; requires SMB Direct and an RDMA-capable network interface
- Other kernel reports
- Three of the five reports were unrelated to SMB
- Neowin publication
- October 22, 2026
2 sources
What people are saying
For some reason you sent this to public lists, and did not include a patch, so there's not much we can do with this.
Again, no patch, and sent to a public list? Please fix your submission process.