Linux Kernel ksmbd Out-of-Bounds Read Vulnerability Due to Insufficient Sub-Authorization Validation

A vulnerability in the Linux kernel's ksmbd component allows for an out-of-bounds read. This issue arises because the number of sub-authorizations is not properly validated before accessing the sub-authorization data. The vulnerability has been addressed by adding a validation step to ensure that the number of sub-authorizations is non-zero before accessing the related data.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can potentially be exploited to read sensitive information from memory or cause a denial-of-service condition.