An authentication-required vulnerability in the Linux kernel ksmbd module allows authenticated users to bypass mandatory file locks, potentially leading to unauthorized data access or modification.

The vulnerability exists within the ksmbd implementation of check_lock_range, which incorrectly treats single-byte ranges as empty ranges and skips necessary lock validation. This allows an authenticated attacker to perform reads, writes, or truncations on files that should be protected by conflicting locks.

The ability to bypass byte-range locks poses a significant risk to data integrity and confidentiality. By circumventing locking mechanisms, an attacker can read or modify sensitive files currently being processed by other system services or users, leading to inconsistent application states or unauthorized data exposure. With a CVSS score of 8.1, the high severity reflects the potential for impactful data manipulation despite the requirement for low-level authenticated access.

Immediate Action: Update the Linux kernel to version 6.1.188, 6.6.157, 6.12.110, or 6.18.52 as appropriate for the specific distribution branch.

Proactive Monitoring: Review system logs for unusual file access patterns or errors related to SMB/CIFS operations that may indicate attempts to manipulate locked files.

Compensating Controls: Ensure that access to the SMB service is restricted to trusted users via network-level controls and strictly enforce filesystem-level permissions as a secondary layer of defense.

Public Exploit Available: Unknown.

Given the high CVSS score and the direct impact on filesystem locking integrity, organizations utilizing the Linux kernel ksmbd module for SMB services should prioritize patching. Administrators must verify their current kernel version against the specified fixed releases and schedule an update to mitigate the risk of unauthorized file access.