cybercrime.clubhttps://cybercrime.club/tags/disclosure/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usThu, 22 Oct 2026 23:04:03 -0400Two CVSS 9.0 Linux KSMBD RCE Flaws Hit a Public Mailing List Before Any Kernel Fix Existedhttps://cybercrime.club/posts/linux-ksmbd-zdi-can-33774-33549-unpatched-smb-rce-mailing-list-leak/Thu, 22 Oct 2026 23:04:03 -0400https://cybercrime.club/posts/linux-ksmbd-zdi-can-33774-33549-unpatched-smb-rce-mailing-list-leak/Trend Micro ZDI reports for two CVSS 9.0 KSMBD flaws, one pre-authentication, were mistakenly posted to the public Linux kernel list with no mainline fix and no CVE assigned.vulnerabilities