A privilege escalation vulnerability in the Linux kernel ksmbd module, due to insufficient validation of ACE sizes, poses a risk of information disclosure or potential system instability.

The set_ntacl_dacl function fails to verify that the declared size of an Access Control Entry contains all sub-authorities. This results in an out-of-bounds read during POSIX ACL deduplication, which may be exploited by an authenticated attacker.

With a CVSS score of 8.8, this vulnerability represents a high risk to system integrity and confidentiality. Exploitation could lead to unauthorized privilege escalation or system crashes, disrupting critical services that rely on the in-kernel SMB3 server.

Immediate Action: Update the Linux kernel to versions 6.6.148, 6.12.101, 6.18.42, or 7.1.6 or later to include the necessary security fixes.

Proactive Monitoring: Monitor system logs for kernel panics or repeated segmentation faults related to the ksmbd module.

Compensating Controls: If patching is not immediately feasible, disable the ksmbd module on systems that do not require in-kernel SMB serving to eliminate the attack surface.

Public Exploit Available: No (unknown).

Kernel vulnerabilities of this nature require prompt attention to maintain system integrity. Administrators should verify their kernel versions and apply the recommended updates as part of their standard patch management cycle to mitigate potential privilege escalation risks.