An out-of-bounds read vulnerability in the Linux kernel SMB client implementation can lead to kernel memory exposure or denial of service when interacting with non-conforming servers.

This is an out-of-bounds read vulnerability in the smb2_check_message function of the Linux kernel client, triggered by improper length calculations on responses from unauthenticated remote attackers.

A successful exploit of this vulnerability can result in kernel crashes leading to system downtime, or unauthorized disclosure of sensitive kernel memory contents. With a CVSS score of 8.2, this high-severity flaw poses a significant risk to enterprise environments running vulnerable Linux kernels, as it can be triggered remotely without authentication during early connection phases such as SMB negotiate and session setup.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later stable releases containing the official fix.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or KASAN memory error reports related to SMB client operations.

Compensating Controls: Restrict outbound and inbound SMB traffic at network boundaries to trusted internal file shares, and prevent mounting SMB shares from untrusted or external servers.

Public Exploit Available: No - As of Jul 25, 2026, there is no confirmed public exploit in the available data.

Administrators managing systems that utilize the Linux CIFS/SMB client should prioritize updating their kernel packages immediately. Applying the upstream patches prevents out-of-bounds memory reads and secures the node against crafted responses from malicious servers during the initial connection handshake.