The vulnerability occurs in the Linux kernel's ksmbd SMB server daemon. When the ACL buffer is decoded, the error handling path fails to free the allocated buffer, resulting in a memory leak. Additionally, the code incorrectly treats a short server data buffer as successful, leaving a stale pointer and still leaking memory. This flaw can cause the kernel to consume progressively more memory, potentially exhausting system resources and leading to a denial of service. The weakness is a classic memory resource mismanagement issue.

All Linux kernel releases that contain the ksmbd component are affected. No specific version range is listed in the advisory, so any kernel that has not applied this patch could be vulnerable. The flaw affects the kernel's SMB server functionality, so systems running the ksmbd service or any applications that rely on SMB interoperability are in scope.

The CVSS score of 5.5 and EPSS score of < 1% suggest moderate severity but low exploitation probability. The vulnerability is documented in the kernel's source history and has an associated patch in the mainline. Although no denial of service exploits have been reported in the CISA KEV catalog, the bug can be exercised by triggering the offending ACL decode path in ksmbd, which would require an attacker to interact with the SMB service or otherwise cause the failure. The likely attack vector is inferred to be local or remote SMB traffic that leads to the decoding failure. Given the potential for resource exhaustion, system administrators should treat this as a high‑risk kernel defect until a patch is applied.