An out-of-bounds read vulnerability in the Linux kernel ksmbd module allows for potential denial of service or information disclosure by authenticated attackers.

The set_ntacl_dacl function fails to properly bound the walk of Access Control Entries when size accounting overflows occur. This leads to an out-of-bounds read during deduplication, which can be triggered by an authenticated attacker to compromise system memory.

The CVSS score of 8.8 underscores the severity of this kernel-level issue. Successful exploitation can result in unauthorized information disclosure or a denial of service, impacting the reliability and security of systems hosting SMB services.

Immediate Action: Update the Linux kernel to versions 6.6.148, 6.12.101, 6.18.42, or 7.1.6 or later to remediate the vulnerability.

Proactive Monitoring: Monitor for unexpected kernel module behavior or memory access errors in system logs.

Compensating Controls: Disable the ksmbd module on non-essential systems to prevent local attackers from interacting with the vulnerable code path.

Public Exploit Available: No (unknown).

Timely application of kernel security patches is essential to protect against local privilege escalation and memory corruption. Organizations should prioritize updating their Linux distributions to the fixed kernel versions provided by their respective maintainers.