Two CVSS 90 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes

Linux servers running KSMBD the kernels builtin SMB server are exposed to two publicly reported remote code execution flaws rated 90 by Trend Micros Zero Day Initiative with no fix yet in the mainline kernel One of them ZDICAN33774 can be triggered before any network authentication The other ZDICAN33549 requires the SMB Direct transport and an RDMAcapable network