🚨Linux Kernel Vulnerabilities Exposed on Public List
Critical Linux Kernel Flaws Leaked to Public
TL;DR
Trend Micro's Zero Day Initiative accidentally posted critical Linux kernel vulnerabilities to a public mailing list, including a 9.0 CVSS score SMB Direct RCE flaw. Patches are in the works but not yet in the mainline kernel.
Trend Micro's Zero Day Initiative mistakenly posted several critical Linux kernel vulnerabilities to a public mailing list instead of the intended private security list. These vulnerabilities, including a 9.0 CVSS score SMB Direct remote code execution flaw, have not yet been patched in the mainline kernel. Developers and system administrators should be on high alert as patches are in testing or queued for the next kernel release, but the exposure could leave systems vulnerable until the patches are applied. The incident highlights the importance of secure communication channels and the potential risks of human error in security practices. Patches for some vulnerabilities, like the SMB Direct RCE flaw, are expected to be expedited for inclusion in the upcoming Linux v7.5 release.
Key Points
Trend Micro's Zero Day Initiative mistakenly posted several Linux kernel vulnerabilities to the public mailing list, including a 9.0 CVSS score SMB Direct RCE flaw.
A KSMBD race condition vulnerability with a CVSS score of 9.0 is also among the exposed flaws, posing a risk of remote code execution.
A local privilege escalation vulnerability in the network code has a patch expected to be posted soon, but is currently unpatched in the mainline kernel.
Another vulnerability is a VMWGFX VMware graphics driver bug with an out-of-bounds write leading to local privilege escalation, still in testing.
An uninitialized resource in the NVMET code leading to information disclosure is among the exposed vulnerabilities, awaiting patching.
Why It Matters
If you're managing Linux systems, especially those with exposed SMB services, this is a critical issue. The exposure of these vulnerabilities could leave your systems at risk until patches are applied. System administrators and developers need to be proactive in securing their environments and monitoring for these vulnerabilities.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.