This kernel patch corrects out-of-bounds reads in ksmbd share‑configuration responses, a defect that allowed unvalidated variable‑length fields to be processed without verifying their size. The flaw could expose kernel memory contents to an attacker or cause a crash, potentially leading to information leakage or denial of service. Clearing this buffer over‑read eliminates the risk of an attacker reading arbitrary memory data that may contain sensitive information.

All Linux kernel builds that include ksmbd prior to the patch identified in the repos cited (commit 61a8d06600c8c and f25e93768fcc). The exact version range is not enumerated in the advisory, so any kernel where ksmbd is enabled and the vulnerability existed is affected.

Evidently no EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, but the defect is kernel‑level and could be used by a remote attacker who can reach the SMB share configuration interface. Attackers would need network access to the host’s ksmbd service and the ability to send crafted SMB requests containing oversized configuration payloads. Once the out‑of‑bounds read is triggered, memory data may be exposed or the target may crash, providing a potential vector for further compromise.