ZDI-CAN-33367: confirmed root on AlmaLinux, Debian and Ubuntu.
β Slips past the Dirty Frag fix
β No merged patch. No CVE.
Who's exposed + the stopgap: https://thehackernews.com/2026/10/two-cvss-90-linux-ksmbd-rce-flaws.html "
https://x.com/TheHackersNews/status/2114615082823094467
https://nitter.tiekoetter.com/TheHackersNews/status/2114615082823094467