pwn.watch: ZDI incident updates https://pwn.watch/t/zdi Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT [critical] Linux kernel: unpatched ZDI bug reports with repro details leaked to public LKML (ksmbd RCE, CVSS 9.0): Greg Kroah-Hartman replies to the reports: "For some reason you sent this to public lists, and did not include a patch" and "Please fix your submission process..." https://pwn.watch/i/linux-kernel-zdi-reports-leaked-to-lkml linux-kernel-zdi-reports-leaked-to-lkml:2026-10-22:Greg Kroah-Hartman replies to the reports: "For some reason you sent this to public lists, and did not include a patch" and "Please fix your submission process..." Thu, 22 Oct 2026 00:00:00 GMT critical Source: https://lore.kernel.org/dri-devel/2026102254-protector-seventy-6454@gregkh/ Status: live, unpatched [critical] Linux kernel: unpatched ZDI bug reports with repro details leaked to public LKML (ksmbd RCE, CVSS 9.0): Eric Dumazet says a patch for the skb_zerocopy bug, reported by someone else a week earlier, will be available soon. https://pwn.watch/i/linux-kernel-zdi-reports-leaked-to-lkml linux-kernel-zdi-reports-leaked-to-lkml:2026-10-22:Eric Dumazet says a patch for the skb_zerocopy bug, reported by someone else a week earlier, will be available soon. Thu, 22 Oct 2026 00:00:00 GMT critical Source: https://lore.kernel.org/lkml/BYAPR01MB3830CECF5D0871064C59BA0280662@BYAPR01MB3830.prod.exchangelabs.com/ Status: live, unpatched [critical] Linux kernel: unpatched ZDI bug reports with repro details leaked to public LKML (ksmbd RCE, CVSS 9.0): Phoronix reports the leak. ksmbd maintainer Namjae Jeon says the ksmbd race is already fixed in his tree. https://pwn.watch/i/linux-kernel-zdi-reports-leaked-to-lkml linux-kernel-zdi-reports-leaked-to-lkml:2026-10-22:Phoronix reports the leak. ksmbd maintainer Namjae Jeon says the ksmbd race is already fixed in his tree. Thu, 22 Oct 2026 00:00:00 GMT critical Source: https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities Status: live, unpatched [critical] Linux kernel: unpatched ZDI bug reports with repro details leaked to public LKML (ksmbd RCE, CVSS 9.0): ZDI sends ZDI-CAN-33549, 33774, 33367, 34068 and 34076 to security@kernel.org with public lists (linux-kernel, linux-cifs, netdev, dri-devel) in Cc. https://pwn.watch/i/linux-kernel-zdi-reports-leaked-to-lkml linux-kernel-zdi-reports-leaked-to-lkml:2026-10-21:ZDI sends ZDI-CAN-33549, 33774, 33367, 34068 and 34076 to security@kernel.org with public lists (linux-kernel, linux-cifs, netdev, dri-devel) in Cc. Wed, 21 Oct 2026 00:00:00 GMT critical Source: https://lore.kernel.org/lkml/BYAPR01MB3830472B5702C089B0BBB77D80662@BYAPR01MB3830.prod.exchangelabs.com/ Status: live, unpatched [critical] Linux kernel: unpatched ZDI bug reports with repro details leaked to public LKML (ksmbd RCE, CVSS 9.0): Stefan Metzmacher asks the reporter to test his for-7.5/smbdirect branch, saying the SMB Direct bug is probably already fixed there. https://pwn.watch/i/linux-kernel-zdi-reports-leaked-to-lkml linux-kernel-zdi-reports-leaked-to-lkml:2026-10-21:Stefan Metzmacher asks the reporter to test his for-7.5/smbdirect branch, saying the SMB Direct bug is probably already fixed there. Wed, 21 Oct 2026 00:00:00 GMT critical Source: https://lore.kernel.org/lkml/BYAPR01MB3830472B5702C089B0BBB77D80662@BYAPR01MB3830.prod.exchangelabs.com/ Status: live, unpatched [critical] Linux kernel: unpatched ZDI bug reports with repro details leaked to public LKML (ksmbd RCE, CVSS 9.0): Namjae Jeon commits a ksmbd fix for the negotiation race ("ksmbd: wait for negotiation before receiving another PDU") after a separate report. https://pwn.watch/i/linux-kernel-zdi-reports-leaked-to-lkml linux-kernel-zdi-reports-leaked-to-lkml:2026-09-30:Namjae Jeon commits a ksmbd fix for the negotiation race ("ksmbd: wait for negotiation before receiving another PDU") after a separate report. Wed, 30 Sep 2026 00:00:00 GMT critical Source: https://git.kernel.org/pub/scm/linux/kernel/git/linkinjeon/smb.git/commit/?id=68f410faedaf6ee74d81e574733c50ebcc1bd8ed Status: live, unpatched