An unauthenticated remote denial of service vulnerability exists in the Linux kernel ksmbd server due to improper session validation within compound SMB requests.

This flaw involves a null pointer dereference within the ksmbd server via SMB2 compound requests. Unauthenticated attackers can trigger this condition by improperly reusing session states during specific negotiation sequences, requiring no user interaction.

A successful exploitation of this vulnerability leads to a kernel crash, resulting in a complete denial of service for the affected file sharing server. This causes unexpected system downtime and disrupts operational workflows. The assigned CVSS score of 7.5 reflects high availability impact over a network vector without requiring authentication privileges.

Immediate Action: Update the Linux kernel to version 5.15.211, 6.1.177, 6.6.144, 6.12.95, or later where the session validation check is properly enforced.

Proactive Monitoring: Monitor system logs for kernel panics, unexpected reboots, or anomalous network traffic targeting the ksmbd file server component.

Compensating Controls: Restrict network access to the SMB service using firewall rules to ensure that only trusted clients can communicate with the ksmbd interface.

Public Exploit Available: exploit_available (false / unknown)

This vulnerability presents a severe availability risk to systems running vulnerable versions of the Linux kernel with ksmbd enabled. Administrators should apply the official kernel patches immediately to prevent potential denial of service attacks.