A critical use-after-free vulnerability in the Linux kernel ksmbd component poses a significant risk to system stability and availability.

This is a race condition (CWE-421) occurring between the SMB2 close operation and the logoff process within multichannel connections. The vulnerability allows an unauthenticated remote attacker to trigger a use-after-free condition.

Successful exploitation of this flaw can lead to a denial of service, causing system instability or kernel panics. Given the CVSS score of 7.5, this high-severity vulnerability represents a notable risk to operational continuity for environments relying on the ksmbd server, as it allows remote attackers to disrupt critical file-sharing services without requiring authentication.

Immediate Action: Update your Linux kernel to the versions specified in the vendor security advisory, specifically ensuring the ksmbd component is patched to the versions listed above.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual service restarts related to the ksmbd daemon.

Compensating Controls: If immediate patching is not feasible, restrict network access to the ksmbd service to trusted internal segments and disable the multichannel feature if it is not strictly required for business operations.

Public Exploit Available: Unknown.

This vulnerability presents a clear risk to the availability of file-sharing services. Security teams should prioritize patching the Linux kernel across all affected environments as part of the next maintenance cycle. Failure to address this flaw leaves systems vulnerable to remote disruption via specifically crafted SMB2 traffic.