Linux’s KSMBD Hit by Two Critical Security Flaws
Two CVSS 9.0 flaws hit Linux's in-kernel SMB server on October 22, 2026. Before you panic, find out whether you even run it.
If you run a home server, you probably saw the headlines: two remote code execution flaws, both rated 9.0 out of 10, in a Linux SMB server. For anyone with a NAS full of family photos and backups, that sounds like a drop-everything emergency.
It usually isn't. The flaws are not in Samba. They are in KSMBD, the SMB server built into the Linux kernel itself — two different codebases, two different services. Confusing them is how a lot of self-hosters spend a weekend patching a problem they never had.
The question every homelab owner should ask first: which SMB server is actually running on my box?
Samba is not KSMBD
Most NAS systems and Linux distributions share files with Samba, the userspace implementation that has...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE
