Linux Kernel ksmbd Out-of-Bounds Vulnerability in Security Descriptor Parsing

A vulnerability in the Linux kernel's ksmbd component was introduced during the parsing of security descriptors. The issue arises because offsets could exceed the size of the security descriptor structure, leading to a slab-out-of-bounds condition. Additionally, the validation of security identifiers (SIDs) did not properly account for the size of the sub-authority array.

Impact

Exploitation of this vulnerability could lead to a slab-out-of-bounds condition, potentially allowing for memory corruption or other unintended behavior.