ZDI-CAN-33774: ksmbd Protocol Dispatch Race, 28 Heap Bytes Walk Out the Door

ZDI Tag

2026

10-24

ZDI-CAN-33774: ksmbd Protocol Dispatch Race, 28 Heap Bytes Walk Out the Door

10-24

ZDI-CAN-33549: ksmbd SMB Direct Integer Underflow, 8 Bytes to Kernel Crash