A high-severity memory management flaw in the Linux kernel SMB client allows unauthenticated attackers to trigger a denial of service through malformed network responses.

The vulnerability exists in the reparse_buf_ptr function, which performs a use-before-check on the ReparseDataLength field. An unauthenticated remote attacker can supply a specially crafted SMB response with an insufficient OutputCount to trigger an out-of-bounds read, resulting in a kernel panic or service disruption.

Successful exploitation of this vulnerability results in a denial of service for systems utilizing the SMB client. Because the kernel is a privileged component, a crash forces an immediate system reboot, causing unplanned downtime and potential data loss for active file operations. With a CVSS score of 8.2, this represents a significant availability risk that must be addressed promptly.

Immediate Action: Update the Linux kernel to version 7.2.4 or later, or apply the upstream patches identified in the official Linux git repository.

Proactive Monitoring: Monitor system logs for kernel panics or repeated SMB client connection failures that may indicate an attempt to trigger this out-of-bounds read.

Compensating Controls: Restrict SMB client traffic to trusted servers only, as the vulnerability requires the client to process a response from a malicious or compromised SMB server.

Public Exploit Available: Unknown

This vulnerability presents a clear risk to system stability for any environment relying on SMB network mounts. Given the ease of triggering the flaw via network-based interaction, administrators should prioritize patching affected kernels in the next maintenance window to prevent potential denial of service attacks.