The Linux kernel SMB client module misconstructs an error pointer during AEAD request allocation. When an error occurs, the pointer is dereferenced, causing a kernel OOPS and a system crash. The flaw is a type‑conversion bug unrelated to data exposure, but it results in complete loss of availability for the affected host. An attacker who can trigger the allocation path can force a reboot or halt, disabling services for legitimate users.

The vulnerability resides in the kernel’s SMB client code. No specific kernel release numbers are listed; therefore any Linux kernel containing the buggy commit before the fix could be affected. Administrators should check their running kernel against the provided Git commit identifiers to determine patch status. Systems that enable SMB client functionality, especially those exposed to untrusted networks, are at risk.

The CVSS score is not publicly provided and EPSS data is unavailable, but the potential impact remains high. The likely attack vector is the SMB protocol over the network; based on the description, it is inferred that a crafted SMB request forcing the allocation failure can trigger the crash. The vulnerability is not listed in CISA KEV, yet its remote remote attack potential through SMB traffic makes it a moderate‑to‑high risk for availability for hosts with SMB client enabled.