Seemingly by accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list. The vulnerabilities have not yet been patched on the mainline, but at least in some cases fixes are being tested or queued in the “-next” branches. CVSS scores reach 9.0.
Trend Micro’s Zero Day initiative sent a number of vulnerability reports to the Linux Kernel Public Mailing List (LKML) rather than the traditional private security mailing list. This was apparently an error as Linux’s second in command, Greg Kroah-Hartman, responded to each report questioning their submission to the public mailing list.
Among these recently revealed vulnerabilities are:
ZDI-CAN-33549 as a noted CVSS 9.0 vulnerability for SMB Direct remote code execution vulnerability due to integer underflow. For this one, there is a fix in a Git code branch intended for Linux v7.5, but it will probably now be fast-tracked to the mainline.
ZDI-CAN-33774 as a KSMBD race condition that could lead to remote code execution. Another vulnerability classified as CVSS 9.0.
ZDI-CAN-33367 is a vulnerability for skbuff skb_zerocopy in network code that can lead to local privilege escalation. For this one, Linux kernel developers received a security report from another source last week on the same issue and a patch is expected to be released soon.
ZDI-CAN-34068 as VMware VMWGFX graphics driver bug with out-of-bounds write leading to local privilege escalation.
ZDI-CAN-34076 an uninitialized resource in NVMET code leading to information disclosure.
ZDI-CAN-32005 was also posted to the mailing list the day before due to a TCP request stack buffer overflow in the search domain leading to local privilege escalation.
Bug and security reports continue to pour in in an AI-powered world.
Gn tech
