“Seemingly as an accident, overnight several new Linux kernel vulnerability reports were posted to the public Linux kernel mailing list rather than the private security mailing list.”
Two of them are CVSS 9.0 remote code execution bugs in SMB Direct and KSMBD. They landed in public before fixes shipped. Coordinated disclosure only works when the coordinators can send email to the right address. Anyone running KSMBD should turn it off today.