Several unpatched security vulnerabilities related to Linux were posted to public mailing lists in October, revealing technical details before fixes were available This article explores samba report indicates. . The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), include two critical flaws rated at CVSS 9.0.
The reports appeared on public lists, and Linux kernel maintainer Greg Kroah-Hartman questioned why some submissions were sent there without patches. However, the reports credit Trend Micro’s AI scanner, and the reporting points to updated kernel guidance that treats AI-found bugs as already public. This means the reports do not automatically affect systems using Samba alone. The report indicates that a discrepancy in how the server processes queued network requests may cause memory to be accessed beyond its designated boundaries.
The reported cause involves an integer underflow, where a size value wraps around after a subtraction, leading to an incorrect length. A fix was reportedly included in a development branch intended for Linux 7.5, but this does not guarantee that it was already available in released or distribution kernels. If it is required, avoid file-sharing services on untrusted networks, review share permissions, and monitor Linux distributions for security updates to address the issue.
To understand previous KSMBD risks, refer to ZeroOwl’s coverage of a Linux KSMBD remote-code-execution flaw and their report on an AI-assisted discovery in the Linux SMB server.
