A high-severity out-of-bounds read vulnerability in the Linux kernel ksmbd module could result in unauthorized information disclosure or system instability.

The vulnerability stems from a transposed bounds check in the smb_check_perm_dacl function within the ksmbd module. An authenticated attacker can trigger this out-of-bounds read during ACE-walk loops.

This vulnerability poses a risk to data confidentiality and service availability. Because the ksmbd module handles SMB traffic, a successful exploit could allow an attacker to read sensitive memory contents or crash the kernel, leading to significant disruption in file-sharing environments.

Immediate Action: Apply the latest security updates provided by your Linux distribution to move to a patched kernel version (6.6.143, 6.12.93, 6.18.35, or 7.0.12).

Proactive Monitoring: Monitor SMB traffic and system logs for unexpected service restarts or segmentation faults related to the ksmbd kernel module.

Compensating Controls: If patching is delayed, consider disabling the ksmbd kernel module if it is not required for business operations.

Public Exploit Available: unknown

Organizations utilizing the ksmbd kernel module for file services must treat this as a high-priority update. Promptly applying the vendor-supplied kernel patches is essential to prevent potential exploitation by authenticated users within the network.