ZDI-26-1004: Linux Kernel KSMBD Request Buffer Use of Uninitialized Resource Information Disclosure Vulnerability

A vulnerability in the Linux Kernel KSMBD component allows remote attackers to disclose sensitive information without authentication on systems where KSMBD is enabled. The vulnerability is rated with a medium severity score of 6.3 by the Zero Day Initiative.

• zerodayinitiative.com/advisories/ZDI-26-1004/ (opens in a new tab)

• ZDI-26-999: Linux Kernel Proc File System Pagemap Scan Use-After-Free Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1000: Linux Kernel GSM Multiplexing Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1001: Linux Kernel SCTP Subsystem Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1002: Linux Kernel Net Scheduler Qdisc Improper Validation of Array Index Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1003: Linux Kernel ksmbd smb_inherit_dacl Out-Of-Bounds Read Information Disclosure VulnerabilityHighVulnerability2026-11-13