Unpatched Linux Kernel Flaws Rated CVSS 9.0 Posted to Public Mailing List

A batch of unpatched Linux kernel vulnerability reports, some carrying a CVSS score of 9.0, was posted to a public mailing list rather than a private security list, Phoronix reported. The reports appear to have come from Trend Micro's Zero Day Initiative.

Among the disclosed entries, ZDI-CAN-33549 is an SMB Direct remote code execution vulnerability caused by an integer underflow, scored CVSS 9.0. ZDI-CAN-33774 is a KSMBD race condition that can also lead to remote code execution, again rated 9.0.

The batch also includes ZDI-CAN-33367, an skbuff skb_zerocopy network code flaw that can cause local privilege escalation, and ZDI-CAN-34068, a VMWGFX VMware graphics driver out-of-bounds write leading to local privilege escalation. ZDI-CAN-34076 is an uninitialized resource in NVMET code leading to information disclosure, while ZDI-CAN-32005 is a search-domain TCP query stack buffer overflow that can result in local privilege escalation.

Greg Kroah-Hartman, who maintains the stable kernel branch, replied to each report asking for the submission process to be fixed, according to Phoronix. The incident was reported by the outlet a day before this article.

Some of the affected fixes are in testing or queued in beta or -next branches, the report said. Kernel developers had received a security report from another source the previous week over the same skbuff issue as ZDI-CAN-33367, and ZDI-CAN-32005 was posted to the mailing list a day before the other reports, Phoronix said.