An input validation flaw in the Linux kernel ksmbd subsystem allows authenticated attackers to trigger heap allocation errors and memory corruption, posing a severe risk to system stability and integrity.

This vulnerability involves improper input validation in the smb_inherit_dacl function within the ksmbd kernel module, where an authenticated client can supply corrupted DACL attribute data to trigger flawed heap allocations and potential integer overflows.

A successful exploit of this vulnerability can lead to kernel memory corruption, potential code execution, or denial of service resulting in system crashes. With a CVSS score of 8.8, the high severity rating reflects the potential for complete compromise of confidentiality, integrity, and availability of the affected host system.

Immediate Action: Update the Linux kernel to version 6.12.84, 6.18.25, 7.0.2, or later, depending on the active distribution branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or anomalies related to ksmbd file share interactions.

Compensating Controls: Restrict network access to the ksmbd service to trusted internal networks and enforce strict file permission controls on extended attributes.

Public Exploit Available: No - As of May 3, 2026, there is no confirmed public exploit in the available data.

Given the critical nature of kernel vulnerabilities and the potential for severe system instability, administrators must apply the provided kernel updates immediately. Ensuring all production systems are running patched versions is essential to mitigating the risk of memory corruption and denial of service attacks.