# Two Critical Linux KSMBD RCE Flaws Disclosed Before Kernel Fixes

Two Linux KSMBD remote code execution vulnerabilities rated CVSS 9.0 were publicly disclosed on mailing lists before kernel fixes were available. The flaws affect the in-kernel SMB server used to provide file-sharing services, making patching urgent for exposed systems. Public disclosure ahead of fixes raises the risk of exploitation before administrators can update.

**Importance:** 4/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html) — Thu, 22 Oct 2026 22:31:53 +0530
- [The Hacker News](https://thehackernews.com/2026/10/ruby-fixes-three-regex-engine-bugs.html) — Fri, 23 Oct 2026 23:24:08 +0530