A high-severity vulnerability in the Linux kernel ksmbd implementation could allow an authenticated remote attacker to bypass access control restrictions through malformed security descriptors.

This vulnerability occurs within the ksmbd kernel-mode SMB server, where the lack of validation for Owner and Group SIDs during ACL inheritance allows for improper security descriptor processing. An authenticated attacker can exploit this to manipulate file permissions.

By bypassing access control lists, an attacker could gain unauthorized access to sensitive files or modify system configurations. With a CVSS score of 8.8, this vulnerability is critical for organizations relying on ksmbd for file sharing, as it directly undermines the confidentiality and integrity of the stored data.

Immediate Action: Update the Linux kernel to version 6.12.92, 6.18.34, 7.0.11, or later.

Proactive Monitoring: Review SMB server access logs for unusual ACL modification requests or unauthorized attempts to access protected directories.

Compensating Controls: Utilize a dedicated SMB gateway or firewall rules to restrict access to the SMB service to authorized clients only.

Public Exploit Available: false

Organizations deploying the ksmbd server must prioritize this update to prevent potential privilege escalation and unauthorized data access. Ensure that all kernel-level SMB services are patched to the recommended versions to maintain robust access control enforcement.