The Linux kernel ksmbd module contains an out-of-bounds read vulnerability that could allow an authenticated attacker to compromise system memory or cause a denial of service.

This flaw exists within the smb_check_perm_dacl function, where improper validation of ACE header sizes and SID caps leads to out-of-bounds memory access. This vulnerability requires the attacker to be authenticated to the network to interact with the ksmbd service.

Successful exploitation allows a remote attacker to gain unauthorized access to sensitive information stored in kernel memory or trigger a system crash, resulting in a denial of service. With a CVSS score of 8.1, this vulnerability poses a significant risk to the availability and confidentiality of the affected infrastructure.

Immediate Action: Update the Linux kernel to version 6.1.177, 6.6.144, 6.12.95, 6.18.38, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or repeated crashes specifically associated with the ksmbd service.

Compensating Controls: Restrict access to the ksmbd service to trusted network segments to limit the pool of potential attackers who can reach the vulnerable code path.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS score and the critical nature of the Linux kernel, administrators should prioritize patching. Apply the recommended kernel updates as soon as they become available through official distribution channels to prevent potential exploitation.