{"id":677,"date":"2026-10-23T06:17:08","date_gmt":"2026-10-23T06:17:08","guid":{"rendered":"https:\/\/www.dragonsmove.com\/?page_id=677"},"modified":"2026-10-23T06:34:46","modified_gmt":"2026-10-23T06:34:46","slug":"news-9-it-news","status":"publish","type":"page","link":"https:\/\/www.dragonsmove.com\/?page_id=677","title":{"rendered":"News 9 #IT News Oct2,2026 Linux"},"content":{"rendered":"\n\n\n\n
\n\n\n \n
\n \n <\/path><\/svg>\n Back to All Articles\n <\/a>\n <\/div>\n\n\n \n
\n
\n
\n IT News<\/span>\n Oct 2, 2026<\/span>\n <\/div>\n\n\n

Linux Kernel Vulnerability Reports Accidentally Disclosed on Public Mailing List<\/h1>\n\n\n

\n Several vulnerability reports intended for coordinated security handling were posted to the public Linux Kernel Mailing List before all fixes were available. Two KSMBD flaws carry CVSS scores of 9.0 and may allow remote code execution. <\/p>\n

<\/p>\n <\/div>\n <\/header>\n\n\n \n

\n\n\n \"Linux\n\n\n

What Happened?<\/h2>\n

Reporting by Cybersecurity News and Phoronix says Trend Micro’s Zero Day Initiative (ZDI) sent several Linux kernel vulnerability reports to the public Linux Kernel Mailing List (LKML), rather than to the private channel normally used for security reports. As a result, details of vulnerabilities that were still being addressed became publicly visible before every fix was ready.<\/p>\n

Linux kernel maintainer Greg Kroah-Hartman responded to the reports and questioned why they had been submitted to a public list. At the time of reporting, some issues had not yet been fixed in the mainline kernel, although patches for certain flaws were reportedly being tested or prepared in development branches.<\/p>\n\n

Two High-Severity KSMBD Flaws<\/h2>\n

The most serious items include two vulnerabilities in KSMBD, the SMB server implemented in the Linux kernel. Both are rated CVSS 9.0 and could lead to remote code execution (RCE).<\/p>\n