Skip to main content

Search complete. 17 mentions across 5 episodes found for "KSMBD".

Oct 25, 2026

WesHOST
10:33
But we also saw some Nginx issues.
WesHOST
10:36
And we saw a bunch of issues in your favorite, KSMBD.
WesHOST
10:39
MARK MANDELMAN- Oh, that's right.
WesHOST
10:40
That was, yes.
WesHOST
11:48
Because we've seen with some, like including with KSMPD, the researcher found some himself that, It was also very interesting because he kept pretty good numbers on the number of sessions found and how often they found things.
WesHOST
12:00
Yeah, so it was worth checking out.
WesHOST
12:02
But they kind of were each fixing each other because this code is genuinely tricky, especially with race conditions or ordering guarantees and KSMBD in particular.
WesHOST
12:11
So he found a vulnerability himself and then proposed a patch, and then the AI found a significant flaw in the patch that would have done almost a similar vulnerability.
WesHOST
9:53
I think the default FastAPI stack in particular wasn't vulnerable, so it depends a lot on the specifics, versus Node, they just ship it, and so you had to update Node because it was baked in.
WesHOST
10:02
But we also saw some Nginx issues, and we saw a bunch of issues in your favorite, KSMBD.
ChrisHOST
10:08
Oh, that's right.
ChrisHOST
10:09
That was,
WesHOST
11:16
Because we've seen with some, like including with KSMPD, the researcher found some himself that, It was also very interesting because he kept pretty good numbers on the number of sessions found and how often they found things.
WesHOST
11:29
Yeah, so it's worth checking out.
WesHOST
11:31
But they kind of were each fixing each other because this code is genuinely tricky, especially with race conditions or ordering guarantees and KSMBD in particular.
WesHOST
11:40
So he found a vulnerability himself and then proposed a patch, and then the AI found a significant flaw in the patch that would have done almost a similar vulnerability.
Michael HouschHOST
4:20
Linux, too, remains a critical battleground.
Michael HouschHOST
4:24
A set of severe vulnerabilities rated 9.0 on the CVSS scale were recently leaked in the Linux kernel's KSMBD module before official patches were available.
Michael HouschHOST
4:35
Premature disclosure like this increases the risk of exploitation, especially for organizations running unpatched Linux servers.
Michael HouschHOST
4:42
The takeaway is straightforward.
Jerry BellHOST
3:32
No attacks yet, but details of two Linux kernel flaws went public before the kernel shipped a fix.
Jerry BellHOST
3:37
They're in KSMBD, the kernel's built-in SMB server.
Jerry BellHOST
3:41
Trend Micro rates both as remote code execution.
Jerry BellHOST
3:44
For anyone who can reach the server on port 445, one of them works.
Jerry BellHOST
3:48
Red Hat doesn't ship KSMBD.
Jerry BellHOST
3:51
Debian and Ubuntu leave it switched off until someone installs its tools.
Jerry BellHOST
3:55
Turn off KSMBD wherever it isn't needed.
Jerry BellHOST
3:59
10.

Unknown podcast

Two CVSS 9.0 Linux KSMBD Remote Code Execution Flaws: SMB Server Risks and Kernel Patching

Oct 23 · 9 Mentions

speaker_0HOST
4:37
Okay, so if complexity at that boundary is the primary breeding ground for vulnerabilities, why on earth are we intentionally blurring that line by shoving file sharing services directly into the kernel?
speaker_1HOST
4:48
You're talking about KSMBD.
speaker_0HOST
4:50
Yes, the kernel SMB daemon.
speaker_0HOST
4:52
Because for anyone who has managed a mixed operating system environment, you know server message block or SMB.
speaker_0HOST
5:02
And on Linux, we've traditionally used Samba for that, which runs nice and safely in user space.
speaker_0HOST
5:08
Well,
speaker_1HOST
5:08
to understand the shift to KSMBD, you really have to look at the penalty of a contact switch.
speaker_0HOST
5:14
Okay, break that down for us.

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.