A high-severity path traversal vulnerability in the Linux kernel ksmbd module exposes systems to unauthorized file system operations, requiring immediate patching.

This flaw involves improper error handling in the ksmbd_vfs_path_lookup function, where a failure to intercept -EXDEV errors during caseless lookups allows an unauthenticated attacker to bypass path restriction checks.

Successful exploitation allows an attacker to create zero-length files or directories outside of the exported share boundary. Given the CVSS score of 8.6, this vulnerability poses a significant risk to data integrity and system configuration, as it could be leveraged to interfere with system operations or prepare for further unauthorized activities.

Immediate Action: Upgrade the Linux kernel to version 7.1.4 or later, or apply the relevant upstream patches referenced in the official kernel git repository.

Proactive Monitoring: Monitor system logs for unusual file creation events or unexpected access patterns originating from the ksmbd service, particularly those involving parent-directory navigation.

Compensating Controls: If immediate patching is not feasible, consider disabling the ksmbd service or restricting access to the SMB interface using network-level segmentation and firewall rules to limit exposure to trusted segments only.

Public Exploit Available: No

The severity of this vulnerability, combined with the lack of required authentication for exploitation, necessitates prompt attention from system administrators. Organizations should prioritize updating their Linux kernel environments to the specified fixed versions to eliminate the underlying path traversal logic error.