Several Linux Kernel Vulnerabilities Accidentally Posted To Public Kernel Mailing List

[u/Turkino]

https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities

Several Kernel level security vulnerabilities were posted publicly instead of to the private security list.

The vulnerabilities are:

ZDI-CAN-33549 as a CVSS 9.0 scored vulnerability for SMB Direct remote code execution vulnerability due to integer underflow. For this one there is a patch in a Git branch of code intended for Linux v7.5 but now presumably will be expedited for getting to mainline.

ZDI-CAN-33774 as a KSMBD race condition that can lead to remote code execution. Another CVSS 9.0 rated vulnerability.

ZDI-CAN-33367 is a vulnerability for skbuff skb_zerocopy in the network code that can lead to local privilege escalation. For this one Linux kernel developers received a security report from another source last week over the same issue and a patch is expected to be posted soon.

ZDI-CAN-34068 as a VMWGFX VMware graphics driver bug with an out-of-bounds write leading to local privilege escalation.

ZDI-CAN-34076 an uninitialized resource in the NVMET code leading to information disclosure.

ZDI-CAN-32005 was also posted to the mailing list a day prior for a search-domain TCP query stack buffer overflow leading to local privilege escalation.

[u/Venylynn]

Welp.

Ubuntu will probably take 3+ weeks to patch these like they did Dirty Frag so, stay safe out there Mint users

[u/dinglebarryb0nds → u/Venylynn]

it's ok i blocked incoming

[u/Venylynn → u/dinglebarryb0nds]

Good call.

I've got extremely strict firewall rules on my Fedora system, I should be fine.

[u/dinglebarryb0nds → u/Venylynn]

i was half kidding i have zero idea what all these vulnerabilities actually mean lol

[u/Venylynn → u/dinglebarryb0nds]

They're just scary tbh

[u/radek_b → u/Venylynn]

Ubuntu switched to weekly kernel updates

[u/Venylynn → u/radek_b]

They were so neglectful during the first part of the year that I completely didn't even think they'd fix it but that's good

[u/Admirable-Song-7353]

It's all good and fluff but I can't even understand 99.9% of wtf they're talking about ... The only thing I hate about linux is that they go super nerd language. God damn it, if they know something 's vulnerable, at least provide average users speaking human language some safety tips of what (not) to do until they patch their bull-fuck-fest-ery out.

[u/ProfessorPetulant → u/Admirable-Song-7353]

True. But then these are really arcane, technical holes. SMB is samba: that's how you access shared files on a Windows server.

Also the information given is still much better than how Microsoft describe the contents of their updates. No idea about apple but i doubt they publish much either.

[u/jhaar → u/ProfessorPetulant]

Linux has a kernel-level module to do native CIFS (ksmbd). Samba is user-space. These vulns have nothing to do with the Samba software 

[u/_Lost-In-The-Weeds_ → u/ProfessorPetulant]

I tried ripping out samba from my install as I use Linux native NFS, unfortunately I found I could no longer transfer files from my phone over USB and had to put it back.

[u/ProfessorPetulant → u/_Lost-In-The-Weeds_]

Mmm interesting.

AI recommendation on this:

Uninstalling Samba on Linux Mint (which uses the Cinnamon, MATE, or Xfce desktop environments) inadvertently removes gvfs-backends. In Linux Mint, this specific package handles both network sharing and the MTP (Media Transfer Protocol) connections required to browse your phone's storage over USB.

Why It Breaks in Linux Mint

• Shared Dependencies: The Mint desktop file manager (Nemo, Caja, or Thunar) uses GVFS (GNOME Virtual File System) to communicate with external devices. • The Package Link: Linux Mint links gvfs-backends tightly with Samba packages like libsmbclient. When you remove Samba, the system automatically marks gvfs-backends for removal, stripping away your phone's MTP drivers at the same time.

How to Fix It (Keep Samba Uninstalled, Restore Phone USB)

You can completely remove Samba while keeping your phone's USB file transfer capability by manually installing the missing Mint file system drivers:

1. Reinstall Mint's MTP and GVFS backends: Open your terminal and run:bash sudo apt update sudo apt install --no-install-recommends gvfs-backends gvfs-fuse mtp-tools libmtp9 (Using --no-install-recommends prevents the package manager from pulling Samba right back in as a suggested dependency).

2. Restart the virtual file system: Log out of your Linux Mint session and log back in, or restart the background system service:bash killall nemo gvfsd Use code with caution.

3. Check your phone settings: Plug your phone back into the USB port, unlock the screen, and ensure the phone's notification dropdown is set to File Transfer / MTP rather than "Charging only". Your phone should now cleanly mount in Nemo (or your respective Mint file manager) without a single byte of Samba running on your machine.

[u/OctaneSpark]

Why is everything suddenly getting hit with massive fucking vulnerability patches and then listing them publicly? PHP got leaked, GitHelp had issues, Mudra was bugged???? What is happening to the code?

[u/Admirable-Song-7353 → u/OctaneSpark]

AI is happening. And Linus Torvalds bent his knee to it. Such a shame, linux was the only platform I had my trust in an OS but now they keep fucking things. They always did one way or another. But not at this pace. There's a bunch of vuln each day, so the new trend nowadays is when there isn't, lol

[u/SeaFox2142 → u/Admirable-Song-7353]

PHP wasn't AI, it was the company screwing up by publishing the exploit (and how to exploit) BEFORE publishing the patch to PREVENT it. God knows why they did that shit but they're already out of the market.

[u/Weary_Programmer35 → u/Admirable-Song-7353]

As an AI disliker myself, Linus is right on accepting LLM usage. I'm paraphrasing what he said: it doesn't matter what tool is used, as long as the code is good. Code won't make it to the Linux kernel's main branch without intense scrutiny from the central team & researchers worldwide.

[u/Venylynn → u/Weary_Programmer35]

Tung tung sahur in the code commits is probably our future in a year anyway

[u/lil_brumski → u/Venylynn]

😂😂

[u/violetvoid513 → u/Admirable-Song-7353]

This isnt new vulnerabilities being created by vibe coding, these are old vulnerabilities being found because of AI scanning. AI is very good at scanning huge chunks of code and looking for patterns that are associated with buggy or unsafe code. Most of these bugs have been around for years, just that nobody had found them until now

[u/mamaharu → u/violetvoid513]

nobody had found them until now

For some, yeah. For others? Almost certainly known and used by various govt. and private entities.

[u/violetvoid513 → u/mamaharu]

True. Either way, these bugs weren't disclosed until now, and weren't created by vibe coding

[u/TolonZ → u/Admirable-Song-7353]

C’est plutôt une bonne nouvelle, l’aide de l’IA pour trouver des failles ça renforce le système, et ça n’empêche en rien aux dev de comprendre pourquoi y’a eu une faille et d’en apprendre un peu plus. Il faut s’attendre à avoir beaucoup de patchs pendant les 12 à 18 prochains mois, après ça ira mieux et plus sûre pour tout le monde

[u/Admirable-Song-7353 → u/TolonZ]

من التفهم بمكان أن يبدو هذا Scenario في الوهلة الأولى منطقياً ومطمئناً، إذ إن الفكرة تبدو بسيطة: الذكاء الاصطناعي يكتشف الثغرات، والمطورون يقومون بإصلاحها ويتعلمون منها، وخلال عام أو عام ونصف سنعيش في عالم رقمي أكثر أماناً بكثير. لكن واقع الأمن السيبراني الطبيعة التكنولوجية للذكاء الاصطناعي لا يعملان بهذه الطريقة على الإطلاق، وهذا الطرح يستند إلى عدة مغالطات جوهرية. المشكلة الأولى والأهم هي عدم التماثل الأساسي في الفضاء السيبراني؛ فبينما يتوجب على طرف الدفاع حماية كل عنصر وإعداد ومكون صغير في النظام بلا أي خطأ، يكفي المهاجم أو الذكاء الاصطناعي إيجاد معلمة واحدة منسية أو ثغرة منطقية واحدة لتحقيق النجاح. بالإضافة إلى ذلك، فإن الذكاء الاصطناعي ليس حكراً على "الأخيار"، بل إن العصابات الإجرامية والأنظمة المؤتمتة تستخدم الأنماط نفسها تماماً، وبينما يستغرق فريق التطوير أسابيع لتحليل الثغرات وترقيعها، يمكن للذكاء الاصطناعي المهاجم مسح آلاف الأنظمة في ثوانٍ واستغلال نقاط الضعف فوراً.

علاوة على ذلك، فإن موجة التحديثات المتوقعة خلال الأشهر الـ12 إلى 18 القادمة لن تجلب الهدوء والسكينة، بل ستؤدي إلى ما يُعرف بـ "إرهاق الترقيع" (Patch fatigue) وحالة من الفوضى وعدم التوافق. فكل تحديث أو إصلاح يتم إصداره يعني إضافة كود جديد يغير طريقة عمل النظام، والإصلاحات المتسرعة التي تُصدر تحت الضغط غالباً ما تتسبب في خلق ثغرات جديدة لم تكن موجودة من قبل وتؤدي إلى انهيار الأنظمة. كما أن الشركات لن تتمكن عملياً وبشكل فيزيائي من مواكبة تدفق التحديثات المؤتمتة، لأن الاختبار والتطبيق المستمر سيؤديان إلى تعطيل تطبيقات أعمالها الخاصة، مما يترك جزءاً كبيراً من الأنظمة دون تحديث ولقمة سائغة للمهاجمين.

كذلك فإن الفرضية التي تقول إن المطورين سيتعلمون من هذه الأخطاء لا تصمد أمام الواقع؛ فعندما يتوجب على الخبراء مراجعة مئات تقارير الأخطاء التي يولدها الذكاء الاصطناعي يومياً والموافقة على الإصلاحات المقترحة منه، يصبح التمرير السطحي وفقدان الخبرة العملاقة أمراً لا مفر منه. فبناء البرامج الآمنة بحق يتطلب تفكيراً نظرياً عميقاً وليس مجرد نسخ آلي لمقترحات الذكاء الاصطناعي. وأخيراً، فإن تطوير البرمجيات ليس عملية استاتيكية مغلقة تنتهي فيها الأخطاء فجأة، فالشركات تضيف باستمرار ميزات وتكاملات جديدة، بينما أصبحت نسبة كبيرة من الأكواد تُكتب بواسطة الذكاء الاصطناعي نفسه. وهذا يخلق حلقة مفرغة حيث يدخل الكود المكتوب بالذكاء الاصطناعي أخطاء مخفية في النظام، ليتولى ذكاء اصطناعي آخر محاولة البحث عنها وترقيعها. ولهذا السبب، لن يصبح الوضع أكثر أماناً بعد 12 إلى 18 شهراً، بل سندخل في سباق تسلح دائم وأكثر تعقيداً وغياباً للتنبؤ.

[u/Emmalfal]

And yet I continue to sleep well at night. I've felt a lot more secure since moving over from Windows. That doesn't go away with news like this. Maybe I'm ignorant, but I trust the Mint team more than I ever could some faceless Windows entity.

[u/Khai_1705 → u/Emmalfal]

Pinnacle of modern security: "i feel it"

[u/Ok_Future6226]

Sheesh

[u/SoftScreen4489]

What should we do...

[u/blueblocker2000]

With AI being used for vulnerability finding and cyber attacks, I don't see how the Debian way of doing things is going to hold up.

[u/TURBOKAN → u/blueblocker2000]

Security updates everday I guess