A critical path traversal vulnerability in the Linux kernel ksmbd module allows unauthorized file system access, posing a severe risk to data integrity and system availability.

The vulnerability exists in the ksmbd_vfs_kern_path_create function, where improper path resolution allows an authenticated client to escape the share root by manipulating path components. An attacker can leverage a race condition to force the system to resolve paths outside the intended directory, leading to unauthorized file creation or modification.

The ability to escape the share root via path traversal can lead to unauthorized modification or creation of system files, potentially resulting in full system compromise. With a CVSS score of 9.1, this flaw presents a high risk of integrity and availability loss, which could disrupt critical business operations and compromise sensitive data stored on the affected file server.

Immediate Action: Update the Linux kernel to version 6.12.97, 6.18.40, 7.1.5, or later, as provided by your distribution vendor.

Proactive Monitoring: Review system logs for unusual SMB file creation patterns or attempts to access directories outside of defined share boundaries.

Compensating Controls: Restrict access to the SMB service to trusted network segments and implement strict filesystem permissions to limit the impact if a traversal occurs.

Public Exploit Available: No

This vulnerability is highly severe due to the potential for unauthorized filesystem access and the core nature of the affected kernel component. Security administrators should prioritize patching their Linux kernels to the identified stable versions immediately to mitigate the risk of path traversal and potential remote code execution scenarios.