#KSMBD
Linux’s KSMBD Hit by Two Critical Security Flaws

Two critical Linux KSMBD vulnerabilities have been disclosed. Learn how KSMBD differs from Samba, how to assess exposure, and what mitigations to consider.
#hackernews #news
Linux’s KSMBD Hit by Two Critical Security Flaws
Two critical Linux KSMBD vulnerabilities have been disclosed. Learn how KSMBD differs from Samba, how to assess exposure, and what mitigations to consider.
hackernoon.com
November 9, 2026 at 12:29 PM
Two critical Linux KSMBD vulnerabilities have been disclosed. Learn how KSMBD differs from Samba, how to assess exposure, and what mitigations to consider. #linuxsecurity
Linux’s KSMBD Hit by Two Critical Security Flaws
hackernoon.com
November 8, 2026 at 12:26 PM
CVE-2026-23364 - linux
The ksmbd component in several Canonical Linux kernel packages could let an attacker infer secret information by measuring response times. This risk is fixed by using a…

Too many irrelevant or confusing CVEs? Use stackflag.com

#linux #canonical #Ubuntu1804LTS #CVE #infosec
CVE-2026-23364: Linux kernel ksmbd may allow data leakage
The ksmbd component in several Canonical Linux kernel packages could let an attacker infer secret information by measuring response times.
stackflag.com
November 6, 2026 at 5:40 PM
Well that's an extreme edge case for the second one but hey, could happen in theory
1. Have a Linux kernel with vulnerable version ksmbd installed
2. Have an RDMA storage device physically installed
3. Create a direct-attach SMB share via ksmbd with the 'rdma' option pointing to the storage device
November 8, 2026 at 1:39 PM
Timing attacks like CVE-2026-23364 are subtle but serious. Ubuntu users should update their kernels ASAP to fix this ksmbd side-channel leak. Great heads-up! 🛡️
November 6, 2026 at 5:42 PM
🚨 EUVD-2023-36508
📊 3.7/10

📝 A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control designed to prevent dictionary attacks, which...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36508

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 4:01 AM
🚨 EUVD-2023-36510
📊 5.9/10

📝 A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36510

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 4:01 AM
🚨 EUVD-2023-36512
📊 5.3/10

📝 A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, pot...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36512

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 4:01 AM
🚨 EUVD-2026-119285
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ksmbd: hold a connection reference for each session channel

ksmbd_session_unregister() ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119285

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 3:02 PM
🚨 EUVD-2026-119282
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ksmbd: drain session procfs readers before dropping table references

Session registrati...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119282

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 3:02 PM
🚨 EUVD-2026-119284
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ksmbd: limit sessions on each connection

The pending setup limit only counts InProgress...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119284

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 3:02 PM
🚨 EUVD-2026-119286
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ksmbd: defer connection scavenging while session locks are busy

The expiration worker h...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119286

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 3:02 PM
🚨 EUVD-2026-119289
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ksmbd: reserve space for the UTF-16 terminator in stream info

smb_strtoUTF16() always w...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119289

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 3:03 PM
🚨 EUVD-2026-119283
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ksmbd: reclaim ended sessions on logoff and expiration

LOGOFF and previous-session repl...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119283

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 3:02 PM
🚨 EUVD-2023-36513
📊 7.5/10

📝 A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-a...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-36513

#cybersecurity #infosec #cve #euvd
November 6, 2026 at 9:02 PM
📰 **KSMBD Adds New Options With Linux 7.4**

A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...

📰 Source: Phoronix
🔗 Link: https://www.phoronix.com/news/Linux-7.4-KSMBD

#linux #opensource
KSMBD Adds New Options With Linux 7.4
A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...
www.phoronix.com
October 31, 2026 at 9:48 AM
Brodie Robertson criticizes Trend Micro's ZDI for posting unpatched kernel bug reports to the public LKML, not the private security list. Greg Kroah-Hartman and Peter Zijlstra pushed back.

Via Brodie Robertson

#Linux #cybersecurity

✍️ Gloria
Kernel Devs Lose It When 4 CVEs Were Published To The LKML
Brodie Robertson criticizes Trend Micro's Zero Day Initiative for posting six unpatched Linux kernel vulnerability reports straight to the public LKML instead of the private security@kernel.org list. Two were rated CVSS 9.0, including ksmbd remote code execution bugs. Greg Kroah-Hartman and Peter Zi
phipi.me
November 3, 2026 at 1:43 PM
KSMBD Adds New Options With Linux 7.4 - https://www.phoronix.com/news/Linux-7.4-KSMBD
KSMBD Adds New Options With Linux 7.4
A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...
www.phoronix.com
October 29, 2026 at 9:47 AM
📰 **KSMBD Adds New Options With Linux 7.4**

A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...

📰 Source: Phoronix
🔗 Link: https://www.phoronix.com/news/Linux-7.4-KSMBD

#linux #opensource
KSMBD Adds New Options With Linux 7.4
A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...
www.phoronix.com
October 29, 2026 at 9:45 AM
[Phoronix] KSMBD Adds New Options With Linux 7.4

#Linux #LinuxKernel
KSMBD Adds New Options With Linux 7.4
A number of improvements to KSMBD, the in-kernel SMB3 file server, were merged for the Linux 7.4 kernel...
www.linuxnews.net
October 29, 2026 at 12:00 PM
KSMBD no Linux 7.4 chegou com consultas SMB2 estendidas, limite de sessão por conexão e mais segurança. Se você usa #SMB3 em produção, vale conferir os detalhes e se planejar. Leia o resumo completo. -> tinyurl.com/32rpxnrc
KSMBD no Linux 7.4: O que Muda para Quem usa o SMB3 em Produção
Blog com notícias sobre, Linux, Android, Segurança , etc
tinyurl.com
October 30, 2026 at 11:38 AM
🚨 EUVD-2026-112014
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION

smb2_get_info_filesy...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112014

#cybersecurity #infosec #cve #euvd
October 30, 2026 at 1:02 PM
🚨 EUVD-2026-112015
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION

smb2_get_info_filesystem() rep...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112015

#cybersecurity #infosec #cve #euvd
October 30, 2026 at 1:02 PM
🚨 EUVD-2026-112013
📊 n/a
🏢 Linux

📝 In the Linux kernel, the following vulnerability has been resolved:

ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in

smb2_get_info_file...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-112013

#cybersecurity #infosec #cve #euvd
October 30, 2026 at 1:02 PM