A critical memory management flaw in the Linux kernel SMB client could allow an unauthenticated attacker to trigger a double-free condition, leading to system crashes or potential code execution.

The vulnerability resides in the SMB2_flush function, where inadequate response buffer bookkeeping during replay attempts causes the kernel to free a stale response pointer twice. This flaw is reachable by unauthenticated attackers, as indicated by the CVSS vector AV:N/AC:L/PR:N.

The CVSS score of 9.8 classifies this as a critical vulnerability. Successful exploitation could lead to full system compromise, unauthorized data access, or persistent denial of service conditions. Because the SMB protocol is fundamental to network file sharing, this vulnerability poses a significant risk to the availability and integrity of enterprise storage infrastructure.

Immediate Action: Update the Linux kernel to version 6.6.145, 6.12.96, 6.18.39, 7.1.4, or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or repeated connection resets related to SMB traffic, which may indicate attempted exploitation of this memory corruption flaw.

Compensating Controls: Restrict SMB traffic to known, trusted internal networks and utilize host-based firewalls to limit access to SMB services only to authorized client IP addresses.

Public Exploit Available: No (exploit_available: false)

Given the critical CVSS severity and the low complexity required for exploitation, organizations should prioritize patching their Linux kernel instances. Ensure that all production servers and workstations running SMB services are updated to the specified secure versions to eliminate the risk of memory corruption and potential remote code execution.