The vulnerability arises from an improper boundary check in the Linux kernel SMB client’s POSIX SID parsing routine. The function reads the sub‑authority count byte without ensuring that two bytes remain in the buffer, allowing an attacker to supply a truncated SID that causes the SMB client to read past the end of the allocated memory. This buffer over‑read can lead to a kernel panic or crash of the SMB client, resulting in a denial of service to the local system. The flaw does not lend itself to privilege escalation or data disclosure.

All Linux kernel installations that ship with the SMB client and have not incorporated the hardening patch are affected. The vendor, Linux, offers the Linux kernel as the product; no specific version list is provided in the CVE data, so any kernel containing the vulnerable SMB client code is potentially susceptible.

The flaw is rated with a CVSS score of 8.2, and the EPSS score is less than 1%, indicating a low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker could exploit the flaw by sending malicious SMB traffic that includes a truncated POSIX SID to a target host, triggering the buffer over‑read. While the attack vector requires network access to the SMB service, the impact is limited to service disruption rather than privilege escalation or data exposure. Given the high severity and the potential for service downtime, prompt remediation is advised.