Overnight, several new Linux kernel vulnerability reports were accidentally posted to the public Linux kernel mailing list instead of the private security mailing list. The vulnerabilities have not yet been patched in mainline, though in some cases patches are undergoing testing or queued in "-next" branches. The CVSS scores reach as high as 9.0.
Trend Micro's Zero Day Initiative sent a number of vulnerability reports to the public Linux kernel mailing list (LKML) rather than the typical private security list. The mistake drew a response from Linux's second-in-command, Greg Kroah-Hartman, who replied to each report asking about its submission to the public list.
Among the newly disclosed issues is ZDI-CAN-33549, a CVSS 9.0 SMB Direct remote code execution vulnerability caused by an integer underflow. A patch for it sits in a Git branch intended for Linux v7.5 and will presumably be expedited to mainline. ZDI-CAN-33774, another CVSS 9.0 issue, is a KSMBD race condition that can lead to remote code execution. ZDI-CAN-33367 affects skbuff skb_zerocopy in the network code and can lead to local privilege escalation; kernel developers received a report on the same issue from another source last week, and a patch is expected soon.
Other disclosures include ZDI-CAN-34068, an out-of-bounds write in the VMWGFX VMware graphics driver that leads to local privilege escalation, and ZDI-CAN-34076, an uninitialized resource in the NVMET code that leads to information disclosure. ZDI-CAN-32005, a search-domain TCP query stack buffer overflow leading to local privilege escalation, was posted to the list a day earlier.
The flood of vulnerability reports continues, which the source attributes to an AI-fueled environment.
Source: Hacker News · Summarized by HeadlinesBriefing