A heap-based slab-out-of-bounds read flaw in the Linux kernel ksmbd implementation poses a significant risk of information disclosure and system instability.

The ksmbd_alloc_user function fails to properly validate the hash_sz field within mountd IPC login responses, allowing a local attacker with low privileges to trigger a memcpy operation that reads beyond the allocated buffer boundaries.

Successful exploitation of this vulnerability can result in the disclosure of sensitive kernel memory or cause system crashes, leading to potential denial of service. Given the CVSS score of 7.1, this represents a high risk to environment stability and data confidentiality for systems utilizing the ksmbd kernel module.

Immediate Action: Update the Linux kernel to version 7.2.6 or later, as provided by the upstream stable tree, to ensure the necessary input validation is implemented.

Proactive Monitoring: Monitor system logs for kernel panic events or repeated ksmbd process failures that may indicate attempts to trigger memory corruption.

Compensating Controls: If patching is delayed, restrict access to the ksmbd service or disable the module if it is not required for production operations.

Public Exploit Available: Unknown

This vulnerability highlights the critical importance of maintaining kernel currency in environments utilizing SMB services. Administrators should prioritize the deployment of the 7.2.6 kernel update across all impacted Linux distributions to remediate this memory safety issue and prevent potential exploitation by local users.