Seemingly like an accident, several new Linux kernel vulnerability reports were posted overnight to the public Linux kernel mailing list instead of the private security mailing list. The vulnerabilities have not yet been patched in the mainline, but at least in some cases there are patches in testing or queued in the “-next” branches. CVSS scores go up to 9.0. Trend Micro’s Zero-Day Initiative sent a series of vulnerability reports to the public Linux kernel mailing list (LKML) instead of the typical private security mailing list. This was apparently a mistake with Linux’s second-in-command, Greg Kroah-Hartman, responding to each report asking about it being sent to the public mailing list. These newly disclosed vulnerabilities include: ZDI-CAN-33549 as a CVSS 9.0 rated vulnerability for SMB. Direct remote code execution vulnerability due to an integer overflow. There is a patch for this one in a Git code branch intended for Linux v7.5, but now it will presumably be accelerated to the mainline. ZDI-CAN-33774 as a KSMBD race condition that can lead to remote code execution. Another vulnerability with CVSS 9.0 classification. ZDI-CAN-33367 is a vulnerability for skbuff skb_zerocopy in networking code that can lead to local privilege escalation. For this one, Linux kernel developers received a security report from another source last week about the same issue and a patch is expected to be released soon. ZDI-CAN-34068 as a VMWGFX VMware graphics driver bug with an out-of-bounds write leading to local privilege escalation. ZDI-CAN-34076 an uninitialized resource in the NVMET code leading to information disclosure. ZDI-CAN-32005 was also posted to the mailing list a day earlier due to a TCP query stack buffer overflow in the search domain that caused a local privilege escalation. Bug and security reports keep coming in in the AI-driven world.
