A double-free vulnerability in the Linux kernel SMB client SMB2_open() replay function can lead to memory corruption, system crashes, or remote code execution.

This is a memory management flaw involving an improper double-free condition within the smb client module during SMB2 open replay handling, requiring user interaction over the network.

A successful exploit of this vulnerability can cause severe system instability, kernel panics, and potential remote code execution on affected machines. Given the high CVSS score of 8.8, successful exploitation poses an immediate threat to operational integrity and data confidentiality, potentially allowing attackers to compromise the underlying host system.

Immediate Action: Update the Linux kernel to version 6.6.145, 6.12.96, 6.18.39, 7.1.4, or later depending on the active release branch.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, and unexpected reboots associated with SMB client operations.

Compensating Controls: Restrict network access to untrusted SMB shares and utilize host-based firewalls to limit exposure until updates are applied.

Public Exploit Available: false

Administrators must treat this high-severity vulnerability with urgency by applying the official kernel patches across all affected Linux environments. Prioritize deployment on systems interacting with untrusted or external SMB shares to prevent potential system crashes and memory corruption exploits.