{"cvss":9.0,"cwes":null,"datePublished":"2026-10-22","dateUpdated":"2026-10-22","description":"Bulk import of one of six vulnerability reports that Trend Micro's Zero Day Initiative (ZDI) sent to the PUBLIC Linux kernel mailing list instead of the private security list, as reported by Phoronix on 2026-10-22 (\"seemingly as an accident\") and listed by ZDI as upcoming advisories. This one is ZDI-CAN-33774: Linux kernel, ZDI CVSS 9.0; per Phoronix, KSMBD race condition that can lead to remote code execution; patch status per Phoronix: no patch status reported. IDENTIFIER NOTE: ZDI-CAN-33774 is ZDI's tracking number for an advisory that has not been published, NOT a CVE. No CVE exists for it (NVD keyword search: 0 hits, checked 2026-10-23), so this record uses the ZDI candidate ID and will need a CVE linked as an altId, or a new record, when one is assigned. IMPORTANT: this is a disclosure incident, NOT a confirmed or assessed exploited vulnerability. Neither the article nor ZDI claims any exploitation. That the reports are public and unpatched raises exposure; it is not evidence of exploitation. The primary LKML posts were NOT read: lore.kernel.org answered with a proof-of-work bot challenge, which was not worked around, so the class and patch details above are Phoronix's secondary account and whether the posts contain proof-of-concept code is unknown. Recorded with exploited=true per explicit user direction despite the absence of any exploitation signal, purely to reflect that it was named in this disclosure.","dueDate":"","id":"ZDI-CAN-33774","kev_catalogs":["ndaal"],"knownRansomwareCampaignUse":"","product":"Linux kernel","severity":"CRITICAL","source":"ndaal_kev","title":"ZDI-CAN-33774","vendor":"Linux"}