In the Linux kernel SMB client, a flaw was found in the handling of compound SMB2 requests where a CREATE operation succeeded but a following command failed. The code returned to the caller with an unvalidated CREATE response, potentially leaving the file identifier (FID) in an undefined state and causing the system to add a handle to its open‑handle counter when it should not have. This misuse could let an attacker cause a kernel memory corruption or resource exhaustion, leading to a denial of service by exhausting handles or destabilizing SMB operations. The vulnerability is a classic example of improper initialization and lack of robust error handling (CWE-665) and improper type conversion (CWE-704).

The issue affects all Linux kernel builds that include the SMB client interface. The affected vendor is Linux and the products are the Linux kernel. No specific kernel version ranges are listed, so any kernel version prior to the inclusion of the patch commits is vulnerable. The CPE string indicates a general Linux kernel.* product classification.

The CVSS score is not available, and EPSS is not provided, so the theoretical exploitation probability cannot be quantified. The vulnerability is not currently listed in the CISA KEV catalog, suggesting no confirmed widespread exploitation. Based on the description, the likely attack vector is through a malicious or malformed SMB2 request sent to the kernel SMB client, which could trigger the failure of the CREATE operation to be mishandled. Because the error is not directly exploitable by arbitrary users without SMB network access and because no public exploit is documented, the risk is considered moderate to high for environments that use SMB clients heavily and do not apply the patch.