The vulnerability arises when the Linux kernel fails to properly disconnect an SMB2 tree connection during the smb2_tree_connect() routine, resulting in a memory leak and improper resource release (CWE-401, CWE-772). An attacker can repeatedly request SMB2 tree connect operations that remain established, gradually consuming kernel memory and connection table entries. The leak can lead to degraded performance or a denial‑of‑service condition if the kernel runs out of resources.

The affected product is the Linux kernel. The CNA vendors list the product as Linux:Linux, and the advisory references kernel commits. Any Linux kernel that contains the faulty smb2_tree_connect implementation prior to the referenced patches is vulnerable. Affected versions are all releases before the commit that fixes the leak; the advisory does not enumerate specific kernel releases.

The EPSS score is < 1% and the vulnerability is not listed in CISA KEV. The CVSS score of 5.5 indicates moderate severity. Based on the description, it is inferred that remote attackers could exploit this flaw by sending crafted SMB2 tree connect requests without elevated privileges. An attacker would only need the ability to send such requests, and no additional privileges are required. Given the low exploitation probability, the risk is moderate, but repeated exploitation could lead to a denial of service.