Linux Kernel KSMBD integer underflow allows remote code execution
Original title: ZDI-26-998: Linux Kernel KSMBD SMB Direct Integer Underflow Remote Code Execution Vulnerability
Only systems with SMB Direct enabled are affected; authentication depends on configuration, and ZDI rates it 9.0.
ZDI published ZDI-26-998, an integer underflow in Linux Kernel KSMBD that lets remote attackers execute arbitrary code. Authentication may or may not be required, depending on configuration. Only installations with SMB Direct enabled are vulnerable. ZDI assigned a CVSS rating of 9.0. No fixed version or exploitation status is stated.
- ZDI advisory ID is ZDI-26-998.
- SMB Direct must be enabled for a system to be vulnerable.
- ZDI assigned CVSS 9.0.
- No CVE identifier is given in the advisory text.
Impact: remote arbitrary code execution
| Product | Affected |
|---|---|
| Linux Kernel KSMBD | — |
- Vendors
- Linux
- Products
- Linux Kernel KSMBD
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel KSMBD. Authentication may or may not be required to exploit this vulnerability, depending upon configuration. Only systems with SMB Direct enabled are vulnerable.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.