Linux Kernel ksmbd Memory Leak Vulnerability Leading to Denial-of-Service

A memory leak vulnerability has been identified in the Linux kernel's ksmbd component. This issue arises when a client sends a session setup request containing an unknown NTLMSSP message type. The flaw can lead to a denial-of-service condition by causing resource exhaustion, as the leaked memory is not properly released after its use. The vulnerability affects all versions of the Linux kernel that include the ksmbd component.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by creating a memory leak that is not released, leading to resource exhaustion on the affected system.

Remediation

Linux has released a patch for this vulnerability. The commit details can be found in the official Linux Git repository.