A working exploit for a Linux kernel flaw has been released publicly before the bug received a Common Vulnerabilities and Exposures identifier or an upstream fix, as first reported by Infosecurity Magazine.
The vulnerability, identified as ZDI-CAN-33367, is a local privilege escalation bug within the Linux networking stack. With a CVSS score of 7.8, the flaw allows unprivileged users to modify read-only files in memory.
Researchers confirmed that the proof of concept successfully generates a root shell on multiple distributions, including AlmaLinux, Debian and Ubuntu. This issue stems from a code path missed by previous patches. In addition to this critical bug, five other vulnerabilities were disclosed by the Zero Day Initiative, including two high-severity flaws in the ksmbd server rated at 9.0. These vulnerabilities affect various components, such as the VMware graphics driver and the Non-Volatile Memory Express target. Security experts advise organizations to prioritize mitigation based on active system components rather than relying solely on severity scores.
Recommendations include disabling unnecessary services like ksmbd and restricting network access to sensitive ports. While some vendors have begun testing patches, the lack of immediate fixes across all distributions creates a significant security gap for administrators managing Linux environments.
Source: Infosecurity Magazine
