Two (2) critical vulnerabilities in the Linux kernel, affecting the KSMBD file server module designed for interoperability with Windows systems, were recently identified and patched. KSMBD is a Linux kernel server implementing the SMB3 protocol in kernel space for sharing files over a network. These flaws, tracked as CVE-2024-26592 and CVE-2024-26594, pose significant risks to Linux systems by allowing for remote code execution (RCE) and information disclosure, respectively. The first vulnerability (CVSS score of 9/10) could allow attackers to execute arbitrary code at the kernel level due to a race condition in managing TCP connections. The second (CVSS score of 9.3/10) could lead to sensitive information leaks via incorrect validation of SMB2 authentication tokens. These vulnerabilities highlight the critical role of the KSMBD module in facilitating high-speed file sharing between Linux and Windows systems, while simultaneously drawing attention to the potential dangers associated with such extensive system integration. Identified by a researcher affiliated with Trend Micro’s Zero Day Initiative, the swift patching of these vulnerabilities by the Linux community reflects the ongoing commitment to securing open-source infrastructure. CTIX analysts strongly advise Linux system administrators with KSMBD enabled to update their systems immediately to prevent the exploitation of these vulnerabilities.