
KSMBD
17
MENTIONS
5
EPISODES
5
PODCASTS
Search complete. 17 mentions across 5 episodes found for "KSMBD".
Oct 25, 2026
690: The S in PHP is for Security
W
10:33WesHOST
But we also saw some Nginx issues.
W
10:36WesHOST
And we saw a bunch of issues in your favorite, KSMBD.
W
10:39WesHOST
MARK MANDELMAN- Oh, that's right.
W
10:40WesHOST
That was, yes.
W
11:48WesHOST
Because we've seen with some, like including with KSMPD, the researcher found some himself that, It was also very interesting because he kept pretty good numbers on the number of sessions found and how often they found things.
W
12:00WesHOST
Yeah, so it was worth checking out.
W
12:02WesHOST
But they kind of were each fixing each other because this code is genuinely tricky, especially with race conditions or ordering guarantees and KSMBD in particular.
W
12:11WesHOST
So he found a vulnerability himself and then proposed a patch, and then the AI found a significant flaw in the patch that would have done almost a similar vulnerability.
The S in PHP is for Security | LINUX Unplugged 690
W
9:53WesHOST
I think the default FastAPI stack in particular wasn't vulnerable, so it depends a lot on the specifics, versus Node, they just ship it, and so you had to update Node because it was baked in.
W
10:02WesHOST
But we also saw some Nginx issues, and we saw a bunch of issues in your favorite, KSMBD.
C
10:08ChrisHOST
Oh, that's right.
C
10:09ChrisHOST
That was,
W
11:16WesHOST
Because we've seen with some, like including with KSMPD, the researcher found some himself that, It was also very interesting because he kept pretty good numbers on the number of sessions found and how often they found things.
W
11:29WesHOST
Yeah, so it's worth checking out.
W
11:31WesHOST
But they kind of were each fixing each other because this code is genuinely tricky, especially with race conditions or ordering guarantees and KSMBD in particular.
W
11:40WesHOST
So he found a vulnerability himself and then proposed a patch, and then the AI found a significant flaw in the patch that would have done almost a similar vulnerability.
Daily Cyber & AI Briefing — 2026-10-23
M
4:20Michael HouschHOST
Linux, too, remains a critical battleground.
M
4:24Michael HouschHOST
A set of severe vulnerabilities rated 9.0 on the CVSS scale were recently leaked in the Linux kernel's KSMBD module before official patches were available.
M
4:35Michael HouschHOST
Premature disclosure like this increases the risk of exploitation, especially for organizations running unpatched Linux servers.
M
4:42Michael HouschHOST
The takeaway is straightforward.
VeloCloud zero-day exploited, Railway secrets breach, M365 token replay | Cyber Security News Oct 23
J
3:32Jerry BellHOST
No attacks yet, but details of two Linux kernel flaws went public before the kernel shipped a fix.
J
3:37Jerry BellHOST
They're in KSMBD, the kernel's built-in SMB server.
J
3:41Jerry BellHOST
Trend Micro rates both as remote code execution.
J
3:44Jerry BellHOST
For anyone who can reach the server on port 445, one of them works.
J
3:48Jerry BellHOST
Red Hat doesn't ship KSMBD.
J
3:51Jerry BellHOST
Debian and Ubuntu leave it switched off until someone installs its tools.
J
3:55Jerry BellHOST
Turn off KSMBD wherever it isn't needed.
J
3:59Jerry BellHOST
10.
P
Unknown podcast
Two CVSS 9.0 Linux KSMBD Remote Code Execution Flaws: SMB Server Risks and Kernel Patching
Oct 23 · 9 Mentions
S
4:37speaker_0HOST
Okay, so if complexity at that boundary is the primary breeding ground for vulnerabilities, why on earth are we intentionally blurring that line by shoving file sharing services directly into the kernel?
S
4:48speaker_1HOST
You're talking about KSMBD.
S
4:50speaker_0HOST
Yes, the kernel SMB daemon.
S
4:52speaker_0HOST
Because for anyone who has managed a mixed operating system environment, you know server message block or SMB.
S
5:02speaker_0HOST
And on Linux, we've traditionally used Samba for that, which runs nice and safely in user space.
S
5:08speaker_0HOST
Well,
S
5:08speaker_1HOST
to understand the shift to KSMBD, you really have to look at the penalty of a contact switch.
S
5:14speaker_0HOST
Okay, break that down for us.