The vulnerability occurs in the Linux kernel’s SMB client where the stack‑allocated structure cifs_open_info_data is not zero‑initialized, allowing it to contain random data. If later code does not overwrite these fields, incorrect values can propagate into SMB session handling, potentially leading to erroneous behavior or denial of service from the SMB client side. The flaw stems from improper initialization, compromising the integrity of data managed by the SMB client subsystem.

All Linux kernel builds that include the vulnerable smb/client code are affected. The commit URLs in the references show the patch, but no specific kernel release or version is enumerated in the data; therefore any kernel snapshot prior to the commit is considered vulnerable until the fix is applied.

The CVSS score of 7 indicates a high severity. The EPSS score of <1% suggests a very low probability of exploitation, and the vulnerability is not listed in CISA KEV. The likely attack vector is remote: an attacker would need to craft a malicious SMB request that causes the client to use the uninitialized structure. Because this is client‑side code, the risk manifests when a system initiates SMB connections to external servers and does not verify the data returned by the server.